I've got a complex condition alert that I need to validate. Its primary section is Node based where CPU load GTE 95%, its secondary AND section is Component based where "Processor Queue Length" is GTE 20.What does the SWQL look like to do that? It's a rather long story as to why I've had to do it this way but, I am where I am. How does SW combine the SWQL dumps from the alert trigger screen to decide if it should trigger?
SELECT E0.[Uri], E0.[DisplayName] FROM Orion.Nodes AS E0 WHERE ( ( E0.[CustomProperties].[Environment] = 'PRD' ) AND ( E0.[IsServer] = 'True' ) AND ( E0.[PercentMemoryUsed] >= '95' ) )
SELECT E0.[Uri], E0.[DisplayName] FROM Orion.APM.Component AS E0 WHERE ( ( E0.[ComponentAlert].[ComponentName] = 'Page File Usage' ) AND ( E0.[ComponentAlert].[StatisticData] > '50' ) )