Is there a way to
Anyone? Bueller? Anyone?
*crickets*
Cross reference Windows scheduled tasks with the .cmd files they call (they're in C:\Program Files (x86)\Solarwinds\Orion\UnmanageUtility\Tasks\). Examine the .xml files referenced by the .cmd files (.xml files are in C:\Program Files (x86)\Solarwinds\Orion\UnmanageUtility\Jobs\).
The Windows scheduled tasks will answer the when. The .xml files will answer the who and how long.
For things that don't work as expected, you may see useful information in the UnmanageDebug log in C:\Program Files (x86)\Solarwinds\Orion\UnmanageUtility.
You can force a scheduled Windows task to run ahead of schedule and view a report of unmanaged nodes at that time. Somebody had the below report posted on the Content Sharing section at one time.
SELECT Nodes.Caption, Nodes.UnmanageFrom, Nodes.UnmanageUntil, Nodes.StatusDescriptionFROM Nodes where Unmanaged = 1 or unmanagefrom >= getdate()ORDER BY 1 ASC, 2 DESC
Not sure if these were things that already occurred to you and you were looking for something more streamlined.
By using Orion Report writer tool and selecting 'Advanced SQL' option you should be able to generate the report.
Here is the SQL query.
select nodeid,unmanagefrom,unmanageuntil from Nodes where convert(nvarchar(10),unmanagefrom,108)<>'00:00:00' and convert(nvarchar(10),unmanageuntil,108)<>'00:00:00'
Interesting approach, and - geek that I am - I would love to give it a try, but I can't spend that much time on this type of problem. I need a supported solution from SolarWinds.
-ktb
Thanks, Nandish.
Not exactly what I was looking for, but very helpful. I modified the code a bit to add some additional fields (note: "siteid" (Site ID) is a custom properties field that identifies the location of the device and is used to group the report by site).
select siteid,nodeid,sysname,ip_address,unmanagefrom,unmanageuntil from Nodes where convert(nvarchar(10),unmanagefrom,108)<>'00:00:00' and convert(nvarchar(10),unmanageuntil,108)<>'00:00:00'
d09h Is there any way we can include who unmanaged the node or Audit Event in the report ?