GrWa · IT Infrastructure Architect · ✭✭✭✭✭

Connecting to the database directly, as we're on-prem, and then mimicking the views is the route that we are going. We do still create some custom tables in PowerBI directly based on the original DB tables we connect to so we can do more filtering for things, and the filtering in PowerBI reports only goes so far for our…

Makes sense. A thought that may work would be to see if running Sysmon to monitor would give events with enough information to track it. If not Sysmon, maybe Process Monitor to right to a backing file anything from the burning software EXE and then using something (I am partial to PowerShell) to read the backing file and…

If it is a DLP solution, are your trying to prevent it from happening? Could you disable DVD/CD drives and external peripherals that aren't mice/keyboards? This would prevent needing to monitor when this is tried as it simply wouldn't be possible. Have dedicated machines to do the burning if it is a valid need?

We've used SWQL studio a little bit, it is the API to use with PowerBI that would be the learning aspect of it. And the SWQL that we've looked at so far to wade into learning has been from enabling Hubble so that we can see the SWQL used in the reports when viewing in Orion on the web.

We have the cert set properly, but currently not sure how to use the API to query the data that we would want. This sounds promising though to read how to do this.

Is there a place to see how the views aggregate the data so we could connect to the DB with PowerBI, choose those tables as data sources, and then make matching views or tables in PowerBI to then show in PowerBI visuals? We're trying to get away from having to do extra steps like exports/imports, manual steps to get data…

Looking like we could potentially take the AppInsights and the QoE data and come up with good/poor/bad performance KPIs from those in some way. The "being down but things are still running" may be the trickier part to just have data on without some time of manual tie to ticketing/help desk contacts or the like.

This sounds close to what we were thinking might have to be done, and not thrilled with it. But so goes started from the beginning of something. Thanks!

Can you get information like "can users log in" from a custom SWQL, or would you have to use something like AppInsights/WPM/Pingdom/AppOptics first, and then write SWQL against the data those gather?

You could try this to view the SQL that is being used for a given report that may help lead to the data you want for your query. Where is web based custom reports are stored and how to get SQL query for web based custom reports? - Report Lab - The SolarWinds Platform - THWACK