Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

is it possible to have my orion server only accept commands via swispowershell from a specific node?

solarwinds_beginner

Team,

I have been asked the following from MGMT:

We can allow swispowershell commands to be run to perform mute/unmute and unmanage/manage functions.

Provided we can lock it down to the server that runs the commands to the orion server.

is this doable?

thank you

Find more posts tagged with

Accepted answers

All comments

adam.beedell

Hmm...I feel like you could assuage management to a yes but the real answer is probably closer to a no...

The module generates API calls, so even without the module you can run those actions. You could lock the port down but I think that would break use of the website for your users.

What you could do is limit the unmamage action you're thinking of to an account, and then alert/self destruct the account if used from outside that box. I've got something like that setup.

Listing all unmanaging to just fron one server seems like it'd be a pain for your users under normal circumstances mind

solarwinds_beginner

thats a good option..luckily there is only 1 user that needs this request..so far

bobmarley

They user would first need to have the powershell plugin installed, then have an account that allowed node management. Since all of the unmanage or mute events are kept in the audit log you could easily set up an alert to notify when it occurred.

SELECT TOP 1000 AuditEventID, ToLocal (TimeLoggedUtc) as LocalTime, AccountID, AuditEventMessage
FROM Orion.AuditingEvents
Where AuditEventMessage LIKE '%muted%' AND AuditEventMessage NOT LIKE '%YOURUSERNAME%'

solarwinds_beginner

I thought the following would work to show me all unmanaged and muted events from a user:

SELECT TOP 1000 AuditEventID, ToLocal (TimeLoggedUtc) as LocalTime, AccountID, AuditEventMessage
FROM Orion.AuditingEvents
Where AuditEventMessage LIKE '%unmanaged%' OR '%muted%' AND AuditEventMessage NOT LIKE '%username%'

but can I modify it to show me all unmanaged and muted events from any user? how would i code that?