Security

 View Only

  • 1.  Search for a device's present envrollment profile

    Posted 5 days ago

    I realize this is basic but I cannot figure it out. How can I get something like the following: All devices in [given] profile with a MAC OUI of [OUI]?

    I know how to pull historical data using access tracker, but I don't have a good way to only pull the latest profile/status for each person. I looked under Endpoints but don't have historical data there.

    Any help is much appreciated!



  • 2.  RE: Search for a device's present envrollment profile

    Posted 5 days ago

    Access Tracker is the wrong tool here, it's request history, so you'll always be fighting duplicates. Endpoints is the right repository, it holds current state per MAC.

    Under Configuration, Identity, Endpoints you can filter on the profile fields (Device Category, Family, Name) and search on MAC. The UI filter is limited for combining two conditions like profile plus OUI, so if you need that regularly the Endpoints API is the cleaner path: pull the endpoint list with a filter on the device attributes and match the OUI prefix on your side. Same data, and you can schedule it.

    Insight also has endpoint reports if you'd rather have something scheduled and emailed without scripting.



    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022-2023
    If my post was useful accept solution and/or give kudos
    ------------------------------



  • 3.  RE: Search for a device's present envrollment profile

    Posted 2 days ago

    her eis tehscreenshot for it



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 4.  RE: Search for a device's present envrollment profile

    Posted 13 hours ago

    You can query the database directly with pgadmin. I have used this method with a product called Squared Up. I was actually able to create some interesting dashboards to help find some unwanted scenarios. It does get a bit more complex when you have to join multiple tables, or use json as a filter to search for specific attributes. 

    I personally have found the insight database has been helpful; I dont care to use the web UI that is built in as I cant really get what I want there. 

    I have not tried using Grafana yet. I have seen customers over the years who have wanted more of a front end to look and see stats. Clearpass tends to just operate based on its design and config vs fancy dashboards. There are non-standard ways to get fancy views if you really need. 




Related Content