SWQL Query Filtering to show only ERR and WARN messages

bmakhmutov

Hi ,

Please help with following SWQL query:

SELECT
E.EventCode AS [Event ID],
ToLocal(E.TimeGeneratedUtc) AS [Event Time],
E.ComputerName AS [SQL Server],
E.SourceName AS [SQL Instance],
E.User,
E.Message
FROM Orion.APM.WindowsEvent AS E
INNER JOIN Orion.APM.Component AS C ON E.ComponentID=C.ComponentID
INNER JOIN Orion.APM.Application AS A ON C.ApplicationID=A.ID
WHERE
C.Application.Template.DisplayName='AppInsight for SQL'
AND E.TimeGeneratedUtc > ADDDAY(-1, GETUTCDATE())

I need to show all Windows Events filtering only basing on Error or Warning, excluding Info messages.

Please advice. I am novice in SW monitoring. 

Seashore

See  SQL Error Log Messages on the Summary Dashboard