Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 4015 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SEC Report on Offline Endpoints

Apollo13

Hi,

does any have an idea how to generate a report in SEC on all the computers/endpoints currently offline for a certain period of time?

Thanks in advance.

:51846


This thread was automatically locked due to age.
Parents
  • 0

    Hello Apollo13,

    what's the purpose of such a report and do you intend to run it regularly?

    offline for a certain period of time

    Guess offline would be: Last message time earlier than ...? For an occasional on-the-fly report using SEC's Copy in the Endpoints view, tab Computer Details, sorted by Last message time is the simplest option. Otherwise a simple SELECT from the vComputerHostData table provided by the Reporting Interface could be scripted and if needed scheduled. Just see that vComputerHostData seems to include also deleted and unmanaged computers. Thus perhaps something like

    SELECT Name FROM ComputersAndDeletedComputers WHERE Deleted=0 AND Managed = 1 AND LastMessageTime < 'yyyy-mm-ddThh:mm:ss'"

    would be a start.

    Christian

    :51864
Reply
  • 0

    Hello Apollo13,

    what's the purpose of such a report and do you intend to run it regularly?

    offline for a certain period of time

    Guess offline would be: Last message time earlier than ...? For an occasional on-the-fly report using SEC's Copy in the Endpoints view, tab Computer Details, sorted by Last message time is the simplest option. Otherwise a simple SELECT from the vComputerHostData table provided by the Reporting Interface could be scripted and if needed scheduled. Just see that vComputerHostData seems to include also deleted and unmanaged computers. Thus perhaps something like

    SELECT Name FROM ComputersAndDeletedComputers WHERE Deleted=0 AND Managed = 1 AND LastMessageTime < 'yyyy-mm-ddThh:mm:ss'"

    would be a start.

    Christian

    :51864
Children
No Data