-
1. Re: Host Detail Node History
Duncan GrisbyJul 31, 2019 4:02 AM (in response to James Yant)
Do you perhaps want to look at creationTime(#) and destructionTime(#) of the nodes?
-
2. Re: Host Detail Node History
James Yant Jul 31, 2019 9:04 AM (in response to Duncan Grisby)Well, the issue with that is we may not know what node the dates would be referencing unless we were able to see the name field of the detail.
-
3. Re: Host Detail Node History
Duncan GrisbyJul 31, 2019 9:14 AM (in response to James Yant)
I don't understand. Can't you just do a trivial search?
search Detail where type = "my detail type" show name, creationTime(#)
-
4. Re: Host Detail Node History
James Yant Jul 31, 2019 9:22 AM (in response to Duncan Grisby)That query works if the detail nodes haven't been deleted and still exist. Remember, we're tracking listening ports with these nodes and the issue is getting the nodes that may have been created and then deleted because a port started listening and at some point stopped maybe because the service or application was uninstalled.
-
5. Re: Host Detail Node History
Duncan GrisbyJul 31, 2019 9:24 AM (in response to James Yant)
2 of 2 people found this helpfulsearch flags(include_destroyed) Detail where type = "whatever" show name, creationTime(#), destructionTime(#)
-
6. Re: Host Detail Node History
James Yant Jul 31, 2019 11:13 AM (in response to Duncan Grisby)So, if a detail node is created and then destroyed, will Discovery still keep history on that node if another one is created with the same key using the same text for the name field? For instance, a port starts listening and then stops but later on starts listening again. Would we be able to see that? Also, thank you for the help so far.
-
7. Re: Host Detail Node History
Duncan GrisbyJul 31, 2019 11:32 AM (in response to James Yant)
3 of 3 people found this helpfulYes, Discovery keeps all the destroyed nodes, even if new ones have the same key and name. Eventually they can be purged, by default after a year. See Configuring model maintenance settings - Documentation for BMC Discovery 11.3 - BMC Documentation
-
8. Re: Host Detail Node History
James Yant Jul 31, 2019 2:14 PM (in response to Duncan Grisby)Looks like the limitation here is going to be for nodes that were destroyed over a year ago. They simply don't exist anymore and can't provide information. These are the ones we were having problems finding.