User Guide

Synapse Metrics adds new Storm commands for retrieving a Cortex’s edit activity by time, layer, user, tag, or node attributes.

Getting Started

Check with your Global Admin to enable permissions.

Examples

Display edit history by inbound node

> inet:fqdn=vertex.link | metrics.edits.bynode
Layer                            | User                 | Time                | Form            | EditType        | Edit
---------------------------------------------------------------------------------------------------------------------------------------------------------
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | node:add        | {'valu': 'vertex.link', 'type': 17}
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | prop:set        | {'prop': '.created', 'valu': 1737760166947, 'oldv': None, 'type': 21}
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | prop:set        | {'prop': 'host', 'valu': 'vertex', 'oldv': None, 'type': 1}
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | prop:set        | {'prop': 'domain', 'valu': 'link', 'oldv': None, 'type': 17}
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | prop:set        | {'prop': 'issuffix', 'valu': 0, 'oldv': None, 'type': 2}
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | prop:set        | {'prop': 'iszone', 'valu': 1, 'oldv': None, 'type': 2}
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | prop:set        | {'prop': 'zone', 'valu': 'vertex.link', 'oldv': None, 'type': 17}
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | tag:set         | {'tag': 'foo', 'valu': (None, None), 'oldv': None}
inet:fqdn=vertex.link
        .created = 2025/01/24 23:09:26.947
        :domain = link
        :host = vertex
        :issuffix = false
        :iszone = true
        :zone = vertex.link
        #foo

Display edit history by tag

> metrics.edits.bytag foo
Layer                            | User                 | Time                | Form            | EditType        | Edit
---------------------------------------------------------------------------------------------------------------------------------------------------------
b1d9255c87d00b649bab8699e6ad12e5 | root                 | 2025-01-24 23:09:26 | inet:fqdn       | tag:set         | {'tag': 'foo', 'valu': (None, None), 'oldv': None}

Yield nodes which previously had a tag

> inet:fqdn#foo [ -#foo ]
inet:fqdn=vertex.link
        .created = 2025/01/24 23:09:26.947
        :domain = link
        :host = vertex
        :issuffix = false
        :iszone = true
        :zone = vertex.link
> $tag=foo metrics.nodes.bytag $tag --unset | -#$tag
inet:fqdn=vertex.link
        .created = 2025/01/24 23:09:26.947
        :domain = link
        :host = vertex
        :issuffix = false
        :iszone = true
        :zone = vertex.link

Use of meta:source nodes

Synapse Metrics does not create/use meta:source nodes.