how to pull unmanaged nodes report in solar winds
Open the Solarwinds database manager and run that query from there.
From the NPM server navigate to Start > All Programs > SolarwindsOrion > Advanced Features > Database Manager
This will open the Database Manager. Once it's opened
Click on Add Default Server
Expand the database, then expand the Solarwinds database.
Once it's expanded and you see all of your tables right click over any table and Select Query Table
Delete the contents inside of the box
Paste the query I sent over and select Execute Query. This will give you information you are looking for.
If you want to make this more of a formal process, then I suggest using report writer to save the report.
Here it is in SWQL -- That's from some other post but I can't remember which one. I use it as a resource on one of my pages, you can put it in as a report as well using SWQL.
SELECT N.Caption, N.IP_Address, N.UnManageFrom AS [From], N.UnManageUntil AS [Until], AE.AccountID AS [By], DayDiff(GetUtcDate(), N.UnmanageUntil) AS [Days Left]
FROM Orion.Nodes N JOIN Orion.AuditingEvents AE ON (AE.NetObjectID = N.NodeID)
WHERE N.UnManaged = 1 AND (AE.AuditEventID = (SELECT TOP 1 AE2.AuditEventID FROM Orion.AuditingEvents AE2 WHERE AE2.NetObjectID = N.NodeID ORDER BY AE2.TimeLoggedUtc DESC))
ORDER BY N.Caption
Run the query below. This should give you the report. If it's still not giving you the correct output can you show a pic of your results? I'm interested on seeing what's to the right of node name.
Select caption,unmanaged,UnManageFrom,UnManageUntil
From Nodes
Where unmanaged like '1'
I've been thinking about listing the current unmanaged nodes over the past 60 days. This is what I came up with, I imagine we could tie the current unmanaged nodes to the query below to provide more information.
This query shows you the nodes that went into unmanaged over the last 60 days, it's built around events. So if the device went back into management, the node will still show on this list.
Select Events.EventTime,Nodes.Caption,Message
From Nodes
INNER Join Events
ON Nodes.NodeID = Events.NetObjectID
Where Events.EventType like '40' AND
Events.EventTime>=DateAdd(d,-60, dateadd(d,0,datediff(d,0,getdate())))
Order by EventTime
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.