Powershell script to Find all VMs without a security tag and group

Question

I have powercli module installed and cannot get powernsx to work no matter what I try, so I'm limited to direct API calls to NSX.

The goal is to report on all VMs that do not have a security tag applied.

I know i can see all VMs with Get-VM, and I can get all security tags calling https://10.x.x.x/api/2.0/services/securitytags/tag

That security tag call will only return the number of VMs it's applied to, and not the names. I need the names so I can compare to the output from Get-VM.

Does anyone know how to see the names of all the VMs that have security tags from NSX? The issue is sys admins spin up new servers and do not tag them. Need to see which ones are untagged.

Jawad · Accepted Answer · 2020-02-12 23:01:54Z

1

See if this command helps you find what you are looking for, (reference)

Get-VM | Get-NsxSecuritytagassignment | select-object @{Name="SecurityTag"; expression = {$_.securitytag.name}}, VirtualMachine

edited Feb 12, 2020 at 23:01

answered Feb 12, 2020 at 22:43

Jawad

11.4k3 gold badges28 silver badges43 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

dcvl Over a year ago

Isn't Get-NsxSecurityTagassignment from the powernsx module?

Jawad Over a year ago

It is from powernsx module

dcvl Over a year ago

I cannot get the basic connection to work with the powernsx module. I have a whole other post on that one requesting help. I can access via native API calls though.

Jawad Over a year ago

well.. thats going to get tricky for you real fast if you cant use the modules that gives you flexibility and performance. If you dont have access to nsx module, I dont know how you expect to get the name of the VMs. Security Tag Assignment is specific to NSX Managers and doesnt exist outside of that. vCenter itself doesnt know anything about it and unless you have a list of VM Names (somehow) that are part of that tag, there isnt any way to determine it.

dcvl Over a year ago

I can hit NSX with API calls. I can also hit Vcenter with the powercli module. I can easily get all the VMs in Vcenter...but getting VMs without tags is my biggest problem. My thoughts are, run 2 commands (get-VM and whatever the NSX one that shows VMs without tags). Compare outputs, and show only the VM names that are different.

|

Collectives™ on Stack Overflow

Powershell script to Find all VMs without a security tag and group

1 Answer 1

6 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

6 Comments

Your Answer

Sign up or log in

Post as a guest

Related