Attached is a report inspired by the thread in the NPM discussions about how to tell who and when a device (node) was added to Orion for monitoring.
There are a few nuances to devices being added or deleted, but this will cover most.
Note: This requires that the audit log is enabled and the history of this report only goes back as far as the retention of that log.
Just spotted this so imported and tried it.
Only query: is there any way to extract who system is?
I realise this is the 'network sonar discovery' but is there some where that also list which user actioned that?