Modern Dashboard error in SWQL

MarcosSousa

Hello everybody 

Can help to SWQL below?

SELECT
aa.TriggeredMessage,
aa.TriggeredDateTime,
SUBSTRING(aa.TriggeredDateTime, 1, 19) AS [Data do evento],
ao.RelatedNodeCaption,
ao.EntityCaption,
ac.Name,
ac.AlertMessage,
ac.Severity,
ab.Comments,
CONCAT(
CAST((CAST(SUBSTRING(aa.TriggeredDateTime, 12, 2) AS INT) + 21) % 24 AS VARCHAR(2)),
':',
SUBSTRING(aa.TriggeredDateTime, 15, 6)
) AS Horario -- New column "Horario" with 3 hours subtracted
FROM
Orion.AlertActive AS aa
JOIN Orion.AlertObjects AS ao ON aa.AlertObjectID = ao.AlertObjectID
JOIN Orion.AlertConfigurations AS ac ON ao.AlertID = ac.AlertID
JOIN Orion.NodesCustomProperties AS ab ON ao.RelatedNodeId = ab.NodeID
WHERE
(ab.Comments LIKE 'comments in here%')

I believe these SWQL is correct but in modern Dashboard follow the error

"Provided SWQL query is not valid. Details: RunQuery failed, check fault information. mismatched input '(' expecting ')' in Select clause"

I tried any aways but not work

chad.every

Your CONCAT line is causing the problem. Are you attempting to build a custom date/time format there?

If so, I'd replace the SUBSTRING part with the Date/Time Functions in SWQL, you'll have much more success.
SWQL Functions · solarwinds/OrionSDK Wiki · GitHub