Hi,
Can you show me how to remove duplicated audit events from this query?
SELECT o.TimeLoggedUtc, o.AccountID, o.AuditEventMessage, n.DisplayName, o.AuditingActionType.ActionTypeDisplayName, cp.OS_Environment, cp.os_admin, cp.site_name, cp.mute_node, n.ipaddress, cp.os_type, cp.Site_Server_Room_Rak, cp.Site_Server_Room_Row, n.status, n.childstatus, n.DetailsUrl, o.networknode, n.nodeid
FROM Orion.AuditingEvents o
left JOIN Orion.Nodes n ON o.NetworkNode=n.NodeID
left join orion.nodescustomproperties cp ON o.networknode=cp.nodeid
WHERE cp.mute_node = 'true' and AuditEventMessage like '%Mute_Node% to %True%' and NetworkNode is not NULL and ActionTypeID = 30
order by TimeLoggedUtc DESC
I know there's a new built-in Mute feature with SAM 6.4, however I can't transition to that method yet, so thanks in advance.