Client Management Suite

 View Only

  • 1.  SQL Query to pullup/trace old/deleted policies by policy name

    Posted May 28, 2014 03:23 AM

    Greetings all,

    I must first apologise as my knowledge in SQL query is not of standard, therefore anyone's kind assistance will be greatly appreciated in the matter below.

    My customer/client may not have properly deleted certain patch policies, which caused an uproar because there were several VPs that had their machine restarted automatically, and they do not have info on the respective policy guids except for the policy names.

    I would like to find out if it is possible to construct a SQL query to pull up old/deleted policies by policy name?

     



  • 2.  RE: SQL Query to pullup/trace old/deleted policies by policy name

    Posted May 28, 2014 03:25 PM
    I believe you need to use the nseventhistory table.


  • 3.  RE: SQL Query to pullup/trace old/deleted policies by policy name

    Posted May 28, 2014 09:53 PM

    Greetings SK,

    Many thanks for the assistance, I am however, unable to locate such a table, the closest I get is 

    "EventHistoryRecent"

     



  • 4.  RE: SQL Query to pullup/trace old/deleted policies by policy name

    Posted May 29, 2014 02:10 PM

    The correct table is  Evt_NS_Item_Management

     

    The folloiwng article should help you out:- 

    https://www-secure.symantec.com/connect/forums/management-platform-console-audit