Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Modern Dashboard - Format - AlertMessage field

This may have been asked before, and I did not have luck finding the answer.

In Modern Dashboard using SWQL to build, I have selected the AlertMessage Field, that has alot of entries in the ${N=xxxxxx,M=xxxxxx} format, the dashboard is showing them as the full text, is it possible to convert that to the true values

What I am Getting

What I am wanting the format to look like

Find more posts tagged with

Accepted answers

All comments

fop

Your SWQL query is wrong since you won't have a table called OSG_Company in the database. If you post the code we'll be able to track the problem down.

eem4osg

That is a Custom field name in [SolarWindsOrion].[dbo].[NodesCustomProperties] Table

fop

Ah, this is the Macros I've been learning about this week. They're context based and I haven't worked out how the context works yet, but I assume it's a subset of the query in the dashboard SWQL. Your usage of [dbo] there makes me think you're doing a SQL query and not a SWQL one? Or just listing the field names in the Orion DB.

The Dashboard query interface is all SWQL, and under SWIS there isn't a table name under Nodes called 'CustomProperties'. There's a 'CustomProperty' though, which lists all the field names.

The other table is NodesCustomProperties which lists those field names keyed by NodeID. Solarwinds will just dump the variable name it doesn't understand (or is out of context) as text, and somewhere in the logs will be an entry saying 'couldn't resolve Macro'.

As a test I'd change your entries in the screenshot as ${N=SwisEntity;M=NodesCustomProperties.OSG_Company} and see what happens.

adam.beedell

I think you're using alert message as alert name?

Cant use a macro on a name really

I get the name from the alerconfigurations table I think

mesverrum

You are pulling them from the wrong table. If I recall correctly the ones that are stored in the format you show are in alert configurations, because that's where it stores the template of the message when you build an alert. What you should be pulling from is a field on alert history where eventtype = 0 because that is where the values get written when an alert actually fires.

eem4osg

You are correct I needed the AlertActive.TriggeredMessage