Quantcast
Channel: THWACK: All Content - Orion SDK
Viewing all articles
Browse latest Browse all 2677

How to remove duplicated audit events

$
0
0

Hi,

 

Can you show me how to remove duplicated audit events from this query?

 

SELECT o.TimeLoggedUtc, o.AccountID, o.AuditEventMessage, n.DisplayName, o.AuditingActionType.ActionTypeDisplayName, cp.OS_Environment, cp.os_admin, cp.site_name, cp.mute_node, n.ipaddress, cp.os_type, cp.Site_Server_Room_Rak, cp.Site_Server_Room_Row, n.status, n.childstatus, n.DetailsUrl, o.networknode, n.nodeid

FROM Orion.AuditingEvents o 

left JOIN Orion.Nodes n ON o.NetworkNode=n.NodeID 

left join orion.nodescustomproperties cp ON o.networknode=cp.nodeid

WHERE cp.mute_node = 'true' and AuditEventMessage like '%Mute_Node% to %True%' and NetworkNode is not NULL and ActionTypeID = 30

order by TimeLoggedUtc DESC 

 

 

I know there's a new built-in Mute feature with SAM 6.4, however I can't transition to that method yet, so thanks in advance.


Viewing all articles
Browse latest Browse all 2677

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>