Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

poll data from selected nodes and vulnarbility using SWQL

Im looking for the same type of output as from the "Vulnerabilities for each Node" report in Orion but for wildcard selected nodes using SWQL.

How do I get vulnarbilitys records (Entry Id) for a selection of nodes names.

select selected node.caption..... and show me Vulnerabilities

'Entry Id' AND (caption contains "FW" OR caption contains "BP")

but in SWQL

output like..

node SydneyFW
CVE-2017-3881 web.nvd.nist.gov/.../detail 10,0 High Potential vulnerability Never
CVE-2011-0935 web.nvd.nist.gov/.../detail 10,0 High Potential vulnerability Never

node Put-in-BP
CVE-2018-3881 web.nvd.nist.gov/.../detail 10,0 High Potential vulnerability Never
CVE-2022-0935 web.nvd.nist.gov/.../detail 10,0 High Potential vulnerability Never

Thanks in advanced.

Find more posts tagged with

Accepted answers

All comments

Seashore

Hi Olof

Might this work for you

SELECT TOP 1000 
     VN.EntryId AS [Entry ID]
    ,N.NodeCaption AS [Device Name]
    ,VN.State AS [State]
    ,VN.VulnerabilitiesAnnouncements.Score AS [CVSS V2 Base Score]
    ,VN.VulnerabilitiesAnnouncements.Severity AS [Severity]
    ,VN.VulnerabilitiesAnnouncements.AnnouncementUrl AS [URL]

FROM NCM.VulnerabilitiesAnnouncementsNodes AS VN
INNER JOIN NCM.Nodes AS N ON VN.CoreNodeID=N.CoreNodeID
WHERE N.NodeCaption LIKE 'SES%'

You can filter on node name on the last line. The code can be used in reports where you can sort or grouped as you want.