Node-RED Flow: AD Computer and ePO System Compare

jnetz added a new solution:

Quote

This flow pulls all systems from ePO and creates a set difference with all systems from AD. Each AD computer is evaluated based on FQDN and Hostname to identify if it already exists in ePO. The same process occurs for all systems in ePO with AD. The result is an HTML table with all of the results.

Prerequisites

• The OpenDXL and McAfee ePolicy Orchestrator (ePO) DXL modules have been added to the Node-RED palette.
• A DXL client has been configured in Node-RED (see Client Configuration).
• An ePO DXL service is running and available on the DXL fabric. If version 5.0 or later of the DXL ePO extensions are installed on your ePO server, an ePO DXL service should already be running on the fabric. If you are using an earlier version of the DXL ePO extensions, you can use the ePO DXL Python Service.
• The Node-RED DXL client is authorized to invoke the ePO DXL service, and the user that is connecting to the ePO server (within the ePO DXL service) has permission to execute the "system.applyTag" remote command (see Client Authorization).
• Following Node-RED modules installed in palette:
  • node-red-contrib-activedirectory: A Node-RED nodes collection for Microsoft Active Directory which allows us to query AD for current computers.
  • node-red-contrib-tableify: A Node-RED node which converts JSON into readable HTML for HTTP output.

The output appears as follows:

Here is the Node-RED flow content for this solution:

Code: Node-RED Flow

1. [
2. {
3. "id": "8567a683.e88fa8",
4. "type": "tab",
5. "label": "AD Compare - Systems",
6. "disabled": false,
7. "info": ""
8. },
9. {
10. "id": "ed499ab9.4e71c8",
11. "type": "change",
12. "z": "8567a683.e88fa8",
13. "name": "Set searchText request parameter",
14. "rules": [
15. {
16. "t": "set",
17. "p": "searchText",
18. "pt": "msg",
19. "to": "",
20. "tot": "str"
21. },
22. {
23. "t": "set",
24. "p": "searchNameOnly",
25. "pt": "msg",
26. "to": "false",
27. "tot": "bool"
28. }
29. ],
30. "action": "",
31. "property": "",
32. "from": "",
33. "to": "",
34. "reg": false,
35. "x": 280,
36. "y": 240,
37. "wires": [
38. [
39. "e786bb00.42681"
40. ]
41. ]
42. },
43. {
44. "id": "e786bb00.42681",
45. "type": "dxl-epo-system-find",
46. "z": "8567a683.e88fa8",
47. "name": "",
48. "client": "fa339fae.d0c24",
49. "searchNameOnly": "",
50. "epoUniqueId": "",
51. "returnType": "obj",
52. "x": 300,
53. "y": 340,
54. "wires": [
55. [
56. "734f8e6d.22c438"
57. ]
58. ]
59. },
60. {
61. "id": "df0735e3.1be5d",
62. "type": "query",
63. "z": "8567a683.e88fa8",
64. "name": "Get AD Machines",
65. "url": "ldap://<<HOST>>",
66. "baseDN": "dc=example,dc=com",
67. "x": 430,
68. "y": 500,
69. "wires": [
70. [
71. "1740f61d.f63ec2"
72. ]
73. ]
74. },
75. {
76. "id": "734f8e6d.22c438",
77. "type": "change",
78. "z": "8567a683.e88fa8",
79. "name": "",
80. "rules": [
81. {
82. "t": "set",
83. "p": "epo_systems",
84. "pt": "global",
85. "to": "payload",
86. "tot": "msg"
87. },
88. {
89. "t": "set",
90. "p": "payload",
91. "pt": "msg",
92. "to": "(objectCategory=computer)",
93. "tot": "str"
94. },
95. {
96. "t": "set",
97. "p": "ad_attributes",
98. "pt": "msg",
99. "to": "{\"user\":[\"displayName\",\"dNSHostName\"]}",
100. "tot": "json"
101. }
102. ],
103. "action": "",
104. "property": "",
105. "from": "",
106. "to": "",
107. "reg": false,
108. "x": 360,
109. "y": 420,
110. "wires": [
111. [
112. "df0735e3.1be5d"
113. ]
114. ]
115. },
116. {
117. "id": "1740f61d.f63ec2",
118. "type": "change",
119. "z": "8567a683.e88fa8",
120. "name": "",
121. "rules": [
122. {
123. "t": "set",
124. "p": "payload.ad_systems",
125. "pt": "global",
126. "to": "payload.other",
127. "tot": "msg"
128. },
129. {
130. "t": "set",
131. "p": "ad_systems",
132. "pt": "msg",
133. "to": "ad_systems",
134. "tot": "global"
135. },
136. {
137. "t": "set",
138. "p": "epo_systems",
139. "pt": "msg",
140. "to": "epo_systems",
141. "tot": "global"
142. }
143. ],
144. "action": "",
145. "property": "",
146. "from": "",
147. "to": "",
148. "reg": false,
149. "x": 500,
150. "y": 580,
151. "wires": [
152. [
153. "25f79878.5976b"
154. ]
155. ]
156. },
157. {
158. "id": "25f79878.5976b",
159. "type": "function",
160. "z": "8567a683.e88fa8",
161. "name": "Set Diff",
162. "func": "/* \nSearch through each set and identify systems in AD not in ePO. And, identify systems in ePO and not in AD\"\n*/\nmsg.ad_count = msg.ad_systems.length;\nmsg.epo_count = msg.epo_systems.length;\nmsg.debuga = [];\n\nmsg.payload.ad_alone = [];\nmsg.payload.epo_alone = [];\n//Find all AD systems not in ePO\nfor (var i = 0; i < msg.ad_count; i++) {\n match_found = false;\n for (var j=0; j < msg.epo_count; j++){\n if(msg.ad_systems[i].dNSHostName && msg.epo_systems[j][\"EPOComputerProperties.IPHostName\"])\n {\n if (msg.ad_systems[i].dNSHostName.toUpperCase() === msg.epo_systems[j][\"EPOComputerProperties.IPHostName\"].toUpperCase())\n {\n //The current AD system is in the ePO systems\n match_found = true;\n \n }else if(msg.ad_systems[i].dNSHostName.substring(0,msg.ad_systems[i].dNSHostName.indexOf('.')).toUpperCase()=== msg.epo_systems[j][\"EPOComputerProperties.IPHostName\"].toUpperCase())\n {\n //The current AD system is in the ePO systems\n match_found = true;\n }\n }\n }\n \n if (msg.ad_systems[i].dNSHostName && match_found === false)\n {\n msg.payload.ad_alone.push(msg.ad_systems[i].dNSHostName);\n }\n}\n\n//Find all ePO systems not in AD\nfor (var i = 0; i < msg.epo_count; i++) {\n match_found = false;\n for (var j=0; j < msg.ad_count; j++){\n if(msg.ad_systems[j].dNSHostName && msg.epo_systems[i][\"EPOComputerProperties.IPHostName\"])\n {\n if (msg.epo_systems[i][\"EPOComputerProperties.IPHostName\"].toUpperCase() === msg.ad_systems[j].dNSHostName.toUpperCase())\n {\n //The current ePO system is ad systems\n match_found = true;\n \n }else if(msg.epo_systems[i][\"EPOComputerProperties.IPHostName\"].substring(0,msg.epo_systems[i][\"EPOComputerProperties.IPHostName\"].indexOf('.')).toUpperCase() === msg.ad_systems[j].dNSHostName.toUpperCase())\n {\n //The current ePO system is in the ad systems\n match_found = true;\n }else if(msg.epo_systems[i][\"EPOComputerProperties.IPHostName\"].toUpperCase() === msg.ad_systems[j].dNSHostName.substring(0,msg.ad_systems[j].dNSHostName.indexOf('.')).toUpperCase())\n {\n //The current ePO system is in the ad systems\n match_found = true;\n }\n }\n }\n \n if (msg.epo_systems[i][\"EPOComputerProperties.IPHostName\"] && match_found === false)\n {\n msg.payload.epo_alone.push(msg.epo_systems[i][\"EPOComputerProperties.IPHostName\"]);\n }\n}\n\n\nreturn msg;",
163. "outputs": 1,
164. "noerr": 0,
165. "x": 580,
166. "y": 660,
167. "wires": [
168. [
169. "42f441dd.d229a"
170. ]
171. ]
172. },
173. {
174. "id": "d1048efb.8743d",
175. "type": "http response",
176. "z": "8567a683.e88fa8",
177. "name": "",
178. "statusCode": "",
179. "headers": {},
180. "x": 770,
181. "y": 900,
182. "wires": []
183. },
184. {
185. "id": "ab41af78.3595f8",
186. "type": "http in",
187. "z": "8567a683.e88fa8",
188. "name": "",
189. "url": "/epo/adcompare",
190. "method": "get",
191. "upload": false,
192. "swaggerDoc": "",
193. "x": 180,
194. "y": 160,
195. "wires": [
196. [
197. "ed499ab9.4e71c8"
198. ]
199. ]
200. },
201. {
202. "id": "42f441dd.d229a",
203. "type": "change",
204. "z": "8567a683.e88fa8",
205. "name": "",
206. "rules": [
207. {
208. "t": "delete",
209. "p": "payload.other",
210. "pt": "msg"
211. },
212. {
213. "t": "delete",
214. "p": "payload.groups",
215. "pt": "msg"
216. },
217. {
218. "t": "delete",
219. "p": "payload.users",
220. "pt": "msg"
221. }
222. ],
223. "action": "",
224. "property": "",
225. "from": "",
226. "to": "",
227. "reg": false,
228. "x": 680,
229. "y": 740,
230. "wires": [
231. [
232. "6e63550f.4e2dbc"
233. ]
234. ]
235. },
236. {
237. "id": "6e63550f.4e2dbc",
238. "type": "tableify",
239. "z": "8567a683.e88fa8",
240. "name": "",
241. "before": "This is a list of AD systems not found in ePO. And, a list of ePO systems not found in AD.",
242. "after": "",
243. "tableStyle": "",
244. "theadStyle": "",
245. "tbodyStyle": "",
246. "trStyle": "",
247. "tdStyle": "",
248. "x": 740,
249. "y": 820,
250. "wires": [
251. [
252. "d1048efb.8743d"
253. ]
254. ]
255. },
256. {
257. "id": "2e19ef8b.201fe",
258. "type": "comment",
259. "z": "8567a683.e88fa8",
260. "name": "Create https listener",
261. "info": "",
262. "x": 390,
263. "y": 120,
264. "wires": []
265. },
266. {
267. "id": "ab8df7c2.522b48",
268. "type": "comment",
269. "z": "8567a683.e88fa8",
270. "name": "Set properties for the Find systems node",
271. "info": "",
272. "x": 560,
273. "y": 200,
274. "wires": []
275. },
276. {
277. "id": "8d637bf4.30c1a",
278. "type": "comment",
279. "z": "8567a683.e88fa8",
280. "name": "Extract ALL ePO systems",
281. "info": "",
282. "x": 570,
283. "y": 320,
284. "wires": []
285. },
286. {
287. "id": "ca0cf131.87add",
288. "type": "comment",
289. "z": "8567a683.e88fa8",
290. "name": "Assign global value from payload. And, prepare payload and ad_attributes to perform AD Search",
291. "info": "",
292. "x": 830,
293. "y": 420,
294. "wires": []
295. },
296. {
297. "id": "5b0ec24c.f8cf4c",
298. "type": "comment",
299. "z": "8567a683.e88fa8",
300. "name": "Perform a set difference on AD and ePO systems",
301. "info": "",
302. "x": 880,
303. "y": 660,
304. "wires": []
305. },
306. {
307. "id": "826f20db.23d3b8",
308. "type": "comment",
309. "z": "8567a683.e88fa8",
310. "name": "Convert the JSON results into HTML for rendering",
311. "info": "",
312. "x": 1030,
313. "y": 800,
314. "wires": []
315. }
316. ]

Display More

Display More