The most recent content from our members.
We use Orion to manage networking devices and I have been tasked with creating a Splunk dashboard to monitor events. I am using Splunk DB connect to ingest Audit Events to my SEIM. The issue is that almost all of the data I am getting from AuditingEvents seems to be duplicate junk data. I am seeing logins from the same…
Currently, there is no auditing for any Custom Property changes aside from changing a node object custom property. For example, when changing the City on a node, I get an Audit Event saying my user made that change. When making similar changes on interface, group, application etc. there is no Audited event for this. This…
I see a few threads in the forum about this, but not an actual feature request. So, hopefully I'm not doubling up on this. There doesn't appear to be any auditing around the creation/updating/deleting of discovery profiles. Unfortunately, anybody with node management rights can edit or remove these discovery profiles, if…
Account Auditing is a big thing these days. Especially in industries like healthcare where you have HIPPA regulations. You might say some of us have gotten spoiled by the level of detail available to know what user's have done while logged into a system. Well that is the case for me and I would like to see more detail in…
There are some ideas and questions about how to see particulat issue in Audit Events. One asked who cleared alert instance, another one asked who enabled NCM on a node. I remember that I didn's see all events I'd like to in some installations I configured. Please make Audit Events fully customizable to select relevant…
Could you add a new EventTypeID definition to the AudtingActionTypes table: * ActionTypeID = 110 * ActionType = Orion.UserSessionTimeout * ActionTypeDisplayName = User logged out by session timeout And then have the AuditingEvents table updated, when an Orion user's session times out? Currently the AuditingEvents table…
Hello, I would like to create widget in Node summary page with information about maintenance. Last Event widget doesn't have all the information I need as I would like to get information when Node has been unmanaged when it will end who did that, same for managed again and alerts muted or unmuted for specific time. I have…
Hello, I would like to create Alert for node which is in Maintenance Mode for specific time period. I tried to make alert which will trigger on Auditing event as Trigger Contrition and then change Node custom property for maintenance mode and then next alert for nodes which have the custom property set for longer than some…
Hi all, When a node is deleted from Solarwinds, an “Orion.NodeDelete” event (ActionTypeID=25) is created in Orion.AuditingEvents. The event has an AuditEventMessage that looks like this: “User <USERNAME> deleted node <IP_Address>.” I would very much like to see the node “Caption” property included in the AuditEventMessage…
The Orion.AuditingEvents entity includes two properties that identify the Solarwinds object that was affected by the event: NetObjectID and NetObjectType. It's often useful to create alert definitions that are triggered by Auditing Events. When selecting criteria for one of these alerts, AuditingEvents.NetObjectID and…
It looks like you're new here. Sign in or register to get started.