Unmanaged+%2f+Muted+Nodes+Reports.xml

philip.robinson

This report lists all currently unmanaged or muted nodes.

Find more posts tagged with

mute node

unmanage node

content_exchange

report

Accepted answers

All comments

i_like_eggs

nice job philip.robinson. you could also look at this from another perspective and create a resource that will act as a timer, something like node will re manged in 30 days or will be un-muted in 30 days or 7 days,could also have an informational email based on the query to informer number of devices that will re manged this week

any ways, nice query and great work

Dan

lsalinas

I imported this, but it returns no results for unmanaged or muted.

I am running latest version of SW.

philip.robinson

That is odd I am runinng the latest version of Solarwinds as well. If you run the below in SSMS against your solarwinds db does it return any results?

select
dateadd(minute,datepart(TZoffset,sysdatetimeoffset ()), e.TimeLoggedUtc) AS UnmanagedDT
,n.caption as NodeName
,dateadd(minute,datepart(TZoffset,sysdatetimeoffset ()), n.UnManageFrom) AS UnmanageFrom
,dateadd(minute,datepart(TZoffset,sysdatetimeoffset ()), n.UnManageUntil) AS UnManageUntil
,e.AccountID AS UnmanagedBy
,'Unmanaged' AS MutedUnmanaged
from
nodes n
join
(
select
a.NetworkNode
,a.AccountID
,a.TimeLoggedUtc
from
AuditingEvents a
join
(
select
   NetworkNode
   ,max(auditeventid) as maxeventid
from
   AuditingEvents ae
where
   ActionTypeID=27

group by
   NetworkNode
) m on m.NetworkNode = a.NetworkNode and m.maxeventid = a.AuditEventID
) e
on e.NetworkNode =n.NodeID
where
n.UnManaged = 1

union all

select
dateadd(minute,datepart(TZoffset,sysdatetimeoffset ()), e.TimeLoggedUtc) AS UnmanagedDT
,nm.caption as NodeName
,dateadd(minute,datepart(TZoffset,sysdatetimeoffset ()),n.SuppressFrom) AS SuppressFrom
,dateadd(minute,datepart(TZoffset,sysdatetimeoffset ()),n.SuppressUntil) AS SuppressUntil
,e.AccountID AS UnmanagedBy
,'Muted'
from
AlertSuppression2 n
join
(
select
a.NetworkNode
,a.AccountID
,a.TimeLoggedUtc
from
AuditingEvents a
join
(
select
   NetworkNode
   ,max(auditeventid) as maxeventid
from
   AuditingEvents ae
where
   ActionTypeID=100
group by
   NetworkNode
) m on m.NetworkNode = a.NetworkNode and m.maxeventid = a.AuditEventID
) e
on e.NetworkNode =replace(n.EntityUri,'swis://LIV1MS04.PEELNET.ORG/Orion/Orion.Nodes/NodeID=','')
join
Nodes nm on nm.NodeID = replace(n.EntityUri,'swis://LIV1MS04.PEELNET.ORG/Orion/Orion.Nodes/NodeID=','')
where
SuppressUntil is null

order by 1 desc