Asset History via SQL report

InsightVM SQL Queries
1

Hi, I’m trying to get the asset history for devices via a SQL query. This is the data shown in an asset page, right below the scan history section but I’m unable to find it.

There’s nothing obvious in the documentation Understanding the reporting data model: Dimensions | InsightVM Documentation and I’ve tried also checking the Data Warehouse schema (even though we don’t have one) to see if I can ‘reverse-engineer’ it, but can see anything there.

(The reason for this is that I’ve discovered we have devices that should be being scanned by an engine regularly, but were actually last scanned years ago and then just stopped being detectable for some reason, so the currently displayed data for services and ports is years old. The systems also have the agents which is why they haven’t been purged - if anybody has a better way than what i’m trying above to identify systems that exist but were last scanned by a scan engine years ago then that would be great!)

Thanks

2

in the history of the asset on the page, do you see the attempt of the scan engine scanning it at all, silly question have you logged into the scan engine and done a NMAP to that host manually?

3

Thanks, I worked out what the original issue was (an undocumented firewall change that had been made on a random selection of servers) so that part is resolved, although I still have the problem of trying to identify, via a SQL query report, systems where their last scan by a scanner was a long time ago compared to agent scans. At the moment it’s not an issue because I can resolved the issue on the servers where I’ve identified this, but ideally I need a way to monitor this on an ongoing basis.