10-05-2016 03:23 PM
I'm still pretty new to infoblox but not new to DHCP or DNS.
I'm curious, is there a way to run a report or view from a window which DHCP IPv4 Fixed Addresses are currently unused? Or better yet, which IPv4 Fixed Addresses haven't been used for X number of days?
04-24-2017 12:21 PM - edited 04-24-2017 12:31 PM
E.g. -1 day:
sourcetype=ib:dhcp:lease_history index=ib_dhcp_lease_history ACTION="Fixed" | stats max(_time) as Time by LEASE_IP | where Time<now() - 86400
05-12-2017 09:15 AM
It's not working in my 8.0.5 test environment, but I suspect that is because I don't have a client doing DHCP activity against a fixed address. Try going into the search and just doing the first portion of the query:
Then after it renders some results look at the ACTION type and see what values it contains. In my case there are none of the type "fixed".