This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Switchport IP's/Mac address report

Is there a way to have a report listing a switches ports and the mac address/IP's associated with each port? I can see them when going to a specific node summary page under port details but can't seem to find a way to export the data.

Also is this data able to be sent to Splunk via API?

Parents
  • Here is a SWQL query you can use.

    SELECT TOP 1000 SourceName, SourceIPAddress, SourcePortName, SourcePortAlias, SourcePortType,  MappedIPAddress, MappedHostName, MappedPortDescription, MappedPortName, MappedPortAlias, MappedMACAddress, LastSeen
    FROM Orion.NPM.OrionSwitchPortMapping
    --Where SourceName LIKE '%YourNodeNameHere%'
    Order BY SourceName,  SourcePortName DESC

Reply
  • Here is a SWQL query you can use.

    SELECT TOP 1000 SourceName, SourceIPAddress, SourcePortName, SourcePortAlias, SourcePortType,  MappedIPAddress, MappedHostName, MappedPortDescription, MappedPortName, MappedPortAlias, MappedMACAddress, LastSeen
    FROM Orion.NPM.OrionSwitchPortMapping
    --Where SourceName LIKE '%YourNodeNameHere%'
    Order BY SourceName,  SourcePortName DESC

Children
  • Hmm so that works when I use a custom query for the report data source, but doesn't seem to work when choosing specific nodes. Is that expected? 

  • Here is a new query that selects all records instead of just the first 1000. That may fix your issue with selecting nodes. Also added the source mac address so you will have both the network device and client's MAC in the report. 

    SELECT SourceName, SourceIPAddress, SourcePortName, SourcePortAlias, SourcePortType, SourceMACAddress, MappedIPAddress, MappedHostName, MappedPortDescription, MappedPortName, MappedPortAlias, MappedMACAddress, LastSeen
    FROM Orion.NPM.OrionSwitchPortMapping
    --Where SourceName LIKE '%YourNodeNameHere%'
    Order BY SourceName,  SourcePortName DESC