How to Find Who Removed a Device From NCM - How-to-find-who-removed-a-device-from-NCM/How-to-Find-Who-Removed-a-Device-From-NCM

How to Find Who Removed a Device From NCM
NetCloud Feature
Monitoring_and_Diagnostics
ft:locale
en-US
ft:sourceName
Salesforce
allViewCount
1367
Document Type
Article

Find which NCM user has removed (unregistered) a certain device from NCM.

Devices registered to NetCloud Manager (NCM)
  1. Export NCM alert logs containing the date range in question.
  2. Open alert logs file and search (CTRL+F) for MAC address/NCM name in question.
  • To discover which NCM user has removed (unregistered) a device from NetCloud Manager (NCM), you must first have the MAC address/NCM name of the device is question and an idea of the date/time the device was removed from NCM.
    • NCM alert logs only go back 30 days.  If the device was removed more than 30 days prior, then the alert logs will not contain this event
  • Finding information within the report:
    • MAC address/NCM name will be displayed under 'object_name' column
    • An un-register event will display under 'activity_type_name' as 'delete'
    • The NCM user will be displayed under 'actor_name' column
    • The date and time will be displayed under 'created_at' column