[RESOLVED] Request to display dmi audit data

Share your SQL query ideas for reporting in the WAPT Enterprise console here
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
psgca85
Messages: 6
Registration: December 26, 2023 - 3:02 PM

March 14, 2025 - 4:49 PM

Good morning,

Since the upgrade to version 2.6, DMI data is no longer stored in the hosts table. It is retrieved using DMI auditing.
How can I retrieve this data using a query?.
For example, in version 2.5, to retrieve TPM information from PCs, it was enough to make this request.

Code: Select all

SELECT
	    computer_name,
	    host_info -> 'tpm' AS tpm_infos
FROM
	    hosts
WHERE
   computer_name = 'nomdupc'
Thank you in advance.

Benoit.
Last edited by psgca85 on March 17, 2025 - 10:51, edited 1 time.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

March 17, 2025 - 09:47

Example to retrieve Vendor from BIOS_Information in the audit-dmi package

Code: Select all

WITH cte AS (
    SELECT ctid,
           host_id,
           row_number() OVER (PARTITION BY host_id, value_key ORDER BY value_date) AS rank
    FROM HostAuditData
    WHERE value_section = 'audit-dmi' AND value_key = 'audit-dmi'
)
SELECT
    cte.host_id,
    h.computer_fqdn,
    had.value->'BIOS_Information'->'Vendor' as Vendor
FROM HostAuditData had
JOIN cte ON cte.ctid = had.ctid
JOIN hosts h ON h.uuid = cte.host_id
WHERE cte.rank = 1;
psgca85
Messages: 6
Registration: December 26, 2023 - 3:02 PM

March 17, 2025 - 10:49

Hello,
Thank you for this answer, which I was able to adapt to my needs.
Sincerely,
Benoit.
User avatar
dcardon
WAPT Expert
Messages: 1929
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

March 17, 2025 - 10:54

Hello Benoit,

feel free to post your version of the query as a reply in the forum; there are probably others besides you who will have the same question. :-)

- Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
psgca85
Messages: 6
Registration: December 26, 2023 - 3:02 PM

March 17, 2025 - 10:59

Hello Denis,

Below is my query to find the TPM version.

Code: Select all

WITH cte AS (
    SELECT ctid,
           host_id,
           row_number() OVER (PARTITION BY host_id, value_key ORDER BY value_date) AS rank
    FROM HostAuditData
    WHERE value_section = 'audit-dmi' AND value_key = 'audit-dmi'
)
SELECT
    cte.host_id,
    h.computer_fqdn,
    had.value->'TPM_Device'->'Specification_Version' as TPMVersion
FROM HostAuditData had
JOIN cte ON cte.ctid = had.ctid
JOIN hosts h ON h.uuid = cte.host_id
WHERE cte.rank = 1;
Sincerely,

Benoit.
User avatar
dcardon
WAPT Expert
Messages: 1929
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

March 17, 2025 - 2:36 PM

THANKS :-)
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Locked