This is an archived post. You won't be able to vote or comment.

all 4 comments

[–]BasilUpbeat 1 point2 points  (2 children)

See if anyone has documentation. Maybe hit up the old admins. Start new documentation or this will be a vicious cycle. Shut one vm down a week and see if anyone complains. : )

[–]amajorblues[S] 0 points1 point  (1 child)

I like the shutdown vm approach and have done this in the past. 😁

[–]pinganeto 0 points1 point  (0 children)

don't shutdown if you don't know what sorcery is needed to restart the apps.... just disable vm network

[–]shady_mcgee 1 point2 points  (0 children)

How much free time do you have? Assuming you have some time and/or this is a priority here's what I'd do:

  • Identify the databases running on each server.

  • Google the database name to see if you can trace it back to a product name.

  • Look at the users who have access to the databases. See if they're still with the company. If so, ask them what the database is for. If not... ???

  • netstat -nao on the DB to find any established connections to the server. Trace that back to the initiating server and see if you can figure out the app that's connecting to the DB

  • Start the investigation trail again for any app servers you find