NCM Config Change Audit - Last 24 Hours

What this query does

Identify all devices with configuration changes in the last 24 hours

SWQL Query

SELECT n.NodeName, n.IPAddress, nc.DownloadTime, nc.ConfigType,
       nc.Author, nc.Comments, nc.HashMD5
FROM NCM.Nodes nn
JOIN Orion.Nodes n ON nn.CoreNodeID = n.NodeID
JOIN NCM.NodeConfigs nc ON nn.NodeID = nc.NodeID
WHERE nc.DownloadTime >= ADDDATE('hour', -24, GETDATE())
ORDER BY nc.DownloadTime DESC

NCM

config

change

audit

compliance

Unlock the full POLARISNOC hub

AI-powered SWQL generation, script management, CVE tracking, and verified solution intelligence.