Hi All,
Something strange happened in my production environment, multiple nodes were muted without any audit logs.
When I got to know about this, as a first step of troubleshooting I restarted Orion Services which resolved the issue and now I am getting audit logs.
But what I wanna discuss here is how 1K + nodes set to muted on same day and time, benefit of doubt here is that my audit logs were not working so I was not able to find the culprit behind this, but when I dig deep I found there were some of the muted nodes for which there is an audit log of changing polling engine but no audit log of when and who muted it. Because I pulled out a muted node report from solarwinds and the muted from column have a date after I changed the polling engine. So, ideally mute audit log should also be there.