Create a SWQL query for Memory utilisation over 95% for 30 minutes for a particular custom group

SW_United

So I'd like to obtain a table for a dashboard with all the servers within a particular group that have had memory utilisation of 95% or more over a 30 minute period.

Example of table;

Node Name	Current Memory Usage	Time and Date Utilisation started	Total Minutes Memory Utilisation
Test Server1	98%	11/04/2025  11:26	46 minutes

The group name is Test Servers

Thanks in advance

POST EDIT: So I've managed to get this SWQL to work, however it still needs improving;

SELECT [data].[DisplayName] AS [DisplayName],[data].[InstanceSiteID] AS [InstanceSiteID],[data].[PercentMemoryUsed] AS [PercentMemoryUsed]
FROM orion.nodes AS data
WHERE [data].[PercentMemoryUsed] > 95

stuartd

I'm guessing the Test Servers group is a custom property? In which case you would need to link to the custom properties table.

You should be able to do an implicit link, so no JOIN required. As you've already labelled the orion.nodes table as data, then It would look something like this: 

In your SELECT line, add data.nameofCPtable.nameofCPGroup where CP = customproperties. As you type it out, then after each full stop you should get a table. Just scroll and select. We don't monitor servers but presuming your name is TestServers (with no spaces) then your select line would look like this:

SELECT [data].CustomProperties.TestServers, [data].[DisplayName] AS [DisplayName],[data].[InstanceSiteID] AS [InstanceSiteID],[data].[PercentMemoryUsed] AS [PercentMemoryUsed]

You'd then need to add a filter to your where line, something like:

WHERE [data].[PercentMemoryUsed] > 95 AND [data].CustomProperties.TestServers = 'TestServers'