Switchport IP's/Mac address report

Is there a way to have a report listing a switches ports and the mac address/IP's associated with each port? I can see them when going to a specific node summary page under port details but can't seem to find a way to export the data.

Also is this data able to be sent to Splunk via API?

Parents
  • Here is a SWQL query you can use.

    SELECT TOP 1000 SourceName, SourceIPAddress, SourcePortName, SourcePortAlias, SourcePortType,  MappedIPAddress, MappedHostName, MappedPortDescription, MappedPortName, MappedPortAlias, MappedMACAddress, LastSeen
    FROM Orion.NPM.OrionSwitchPortMapping
    --Where SourceName LIKE '%YourNodeNameHere%'
    Order BY SourceName,  SourcePortName DESC

  • Hmm so that works when I use a custom query for the report data source, but doesn't seem to work when choosing specific nodes. Is that expected? 

  • Here is a new query that selects all records instead of just the first 1000. That may fix your issue with selecting nodes. Also added the source mac address so you will have both the network device and client's MAC in the report. 

    SELECT SourceName, SourceIPAddress, SourcePortName, SourcePortAlias, SourcePortType, SourceMACAddress, MappedIPAddress, MappedHostName, MappedPortDescription, MappedPortName, MappedPortAlias, MappedMACAddress, LastSeen
    FROM Orion.NPM.OrionSwitchPortMapping
    --Where SourceName LIKE '%YourNodeNameHere%'
    Order BY SourceName,  SourcePortName DESC

Reply
  • Here is a new query that selects all records instead of just the first 1000. That may fix your issue with selecting nodes. Also added the source mac address so you will have both the network device and client's MAC in the report. 

    SELECT SourceName, SourceIPAddress, SourcePortName, SourcePortAlias, SourcePortType, SourceMACAddress, MappedIPAddress, MappedHostName, MappedPortDescription, MappedPortName, MappedPortAlias, MappedMACAddress, LastSeen
    FROM Orion.NPM.OrionSwitchPortMapping
    --Where SourceName LIKE '%YourNodeNameHere%'
    Order BY SourceName,  SourcePortName DESC

Children
No Data