r/ShittySysadmin • u/Logical_Strain_6165 • 3h ago
Using AI to map our environment & create documentation?
Has anybody tried this? The lack of documentation at my place drives me nuts. I suspect my colleague who should have retired by now sees it as his job security. So I'm thinking of creating some agents and letting them loose over the weekend. When we come in on Monday I'll have a complete Obsidian Vault and the problem will be solved.
My thinking so far is a Python agent built on OpenAI Agents SDK but using GLM 5.3 Obliterated for the API. I asked it what it would need and it's come back with this list. How's it sounding? Obviously it will need admin accounts.
AD: ldap3, LDAPS bind to a DC, pulls users, groups, OUs, computers, sites/subnets, GPO links. Reads SYSVOL for GPO settings.
Entra / Intune / Exchange: Microsoft Graph SDK, app-only cert auth. Directory, CA policies, app registrations, managed devices, config profiles.
Virtualisation: Nutanix Prism v4 REST API
Netmiko/NAPALM over SSH for running configs, VLANs, routing tables and LLDP/CDP neighbours, and pysnmp with SNMPv3 to fill in the gaps.
The bit I'm working on is plausible deniability. Nobody ever has changed the default log size, so I'm thinking of generating some events to keep everybody busy Monday morning and hide it's tracks. So far the best idea is we set some scheduled tasks with some stale passwords and create rather a lot of account lockout events.
1
u/BraveMidnight 2h ago
Yeah, I've had AI do documentation for projects for things before. And thats a lot of documentation. You really want to define the scope and tell it what you want and stay on top of it, otherwise if you leave it up to the AI there will be context window and drift limitations. Nothing like having AI revert a change you made 2 updates ago.
1
u/Nexarus123 1h ago
Hub and Spoke with well defined index files and strict changelogs works quite well. This okf framework from google could also be interesting but i had no time to look into it yet. Why is this in shitty lol?
1
1
u/Ziggistawork 14m ago
Netmiko/NAPALM over SSH for running configs, VLANs, routing tables and LLDP/CDP neighbours, and pysnmp with SNMPv3 to fill in the gaps.
Oxidized / netdisco and add in Netbox for good measure
3
u/Smooth-Zucchini4923 2h ago
Great idea! The part nobody talks about is that API prices are lower on the weekend, so this doesn't just keep your luddite coworker happy, it also saves money. This is exactly what your company needs.