Alert for Rogue Devices

[BillBergman]

I'm currently using the Trial version of Lansweeper and am curious to know if there is a way to set up an Alert for Rogue devices?

How do I set one up?

[David_GF]

Asset Radar might be what you're looking for: https://community.lansweeper.com/t5/scanning-your-network/introduction-to-asset-radar/ta-p/64508 setting it up to scan the assets it finds, and then use the built in Asset Radar reports (Asset Radar: Log and Assets: Detected by Asset Radar) to create an alert (https://community.lansweeper.com/t5/reporting/send-report-and-event-log-alerts/ta-p/64333) that will run the report at scheduled times and send you the report by email

[rom]

yep - so to add to that, if you tell asset radar to scan or make an asset (i.e. not just log), you can make a copy of the above suggested report, and set it to only show new devices detected within the last 5 minutes... and go to 'email alerts' and tell it to send out that report, every 5 minutes (make a new schedule time for that).  This query should work, though I haven't tested it with a new device found within that timeframe.

Select Top (1000000) tblAssets.AssetID,
  tsysAssetTypes.AssetTypename As Type,
  Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tblAssets.IPAddress,
  tblAssets.Description,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblAssetCustom.Location,
  Case
    When tsysOS.osname Is Not Null Then tsysOS.osname
    When tblLinuxSystem.OSRelease Is Not Null Then tblLinuxSystem.OSRelease
    When tblMacOSInfo.SystemVersion Is Not Null Then tblMacOSInfo.SystemVersion
    When tsysAssetTypes.AssetType = -1 And Coalesce(tblSccmAsset.OsCaption,
      tblSccmAsset.OperatingSystemNameandVersion, '') <> '' Then
      Coalesce(tblSccmAsset.OsCaption,
      tblSccmAsset.OperatingSystemNameandVersion)
    Else ''
  End As OS,
  tblAssets.SP,
  tblAssets.Scanserver,
  tblAssets.Firstseen As [Created at],
  tblAssets.Lastseen As [Last successful scan]
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Left Outer Join tsysOS On tblAssets.OScode = tsysOS.OScode
  Left Outer Join tblLinuxSystem On tblLinuxSystem.AssetID = tblAssets.AssetID
  Left Outer Join tblMacOSInfo On tblMacOSInfo.AssetID = tblAssets.AssetID
  Left Outer Join tblSccmAsset On tblSccmAsset.AssetId = tblAssets.AssetID
Where (tblAssets.ScannedBy & 4096 = 4096 And tblAssets.firstseen >
    DateAdd(minute, -5, GetDate())) Or
  (tblAssets.firstseen > DateAdd(minute, -5, GetDate()) And
    tblAssets.LastAssetRadarScan Is Not Null)
Order By tblAssets.Assettype,
  tblAssets.AssetName