bladren

I need this feature too

Check out 'UDT Emails - Alert me when a rogue MAC Address appears on the network - variables' in thwack.

So i just called Support on this issue and they referred me to create a SQL statement that links 3 tables to sho me the IP & Current Name of the Device. Using (UDT_PorttoPortCurent), (UDT_IPAddressCurrent), (UDT_Endpoint)...... anyone know how to link these 3 tables to get the IP address?

Thanks Craig for all your responses... Makes me feel like there maybe hope for my problem when someone responds back at least. This is a new installation for User Device Tracker 3.2. When i run a query on that table (NodesData) it only has 60 some entries out of the 734 devices that are on my network, but it does have the…

if there is no dbo.nodes table, what is another table i can use?

Ok why can i not use this syntax for my rogue devices then? I am not even seeing a DBO.NODES in my database. I have a DB.UDT_Port table but not the nodes table. What is up with this? IP: ${SQL: SELECT IP_Address FROM [dbo].[Nodes] WHERE (NodeID = ${N=SwisEntity;M=DeviceID})} Device: ${SQL: SELECT Caption FROM [dbo].[Nodes]…

Thanks Alan, What is the difference between using the "New MAC"? and the "Rogue MAC"?

Oh wait that Device is not the Devices name but the switch its connected to... But still helpful information

Can you tell me which variables you inserted to get those? i am not seeing them. I tried copying the syntax from your screen shot but got an error like this Port : MACRO SQL ERROR - Incorrect syntax near '{'. Device : MACRO SQL ERROR - Incorrect syntax near '{'. My SYNTAX after copying... An issue on an object you are…

Correct Tables i mean

Thanks looks like we are getting somewhere now with the correct databases for the information. This is my output with the code you suggested Message: An Unknown MAC address has been detected by Solar Winds User Device Tracker Wednesday, December 9, 2015 4:43 PM. Rouge MAC-Address: 00:04:63:5E:C4:67 Port: MACRO SQL ERROR -…

This is true about the whitelist. By this point i've already enabled the whitelist and used the UDT_ENDPOINT & UDT_PORTS tables to export all the MAC addresses that were discovered and inputted them into the whitelist. Ive used other programs such as notepad ++ with addins called TextFX to find the duplicate MAC addresses…

My output with the code you suggested does this ..... Thanks for looking into the the "Rouge" coding....... Message: Rogue MAC-Address: 00:04:00:EE:79:B7 Port: MACRO SQL ERROR - Incorrect syntax near '{'. IP: MACRO SQL ERROR - Incorrect syntax near '{'. Port Name: MACRO SQL ERROR - Incorrect syntax near '{'. Device: MACRO…

You mind if you show me what your output is like with this query?

All the thanks Craig for your Input and helping me sort this out. This makes perfect sense. A little history here...This whole issue has been months to get something close to our purpose for purchasing this product. We bought solarwinds UDT for one reason only, to see when a new device that we didnt know was plugged into…

My Current Configure Action: Send an Email/Page Message body is coded like this.... An Unknown MAC address has been detected by Solar Winds User Device Tracker ${N=Alerting;M=AlertTriggerTime;F=DateTime}. Rouge MAC-Address: ${N=SwisEntity;M=MACAddress} Port: ${SQL: SELECT Name from [dbo].[UDT_Port] WHERE (PortID = ${SQL:…