SWQL to pull Syslogs when AAA Server Down

sidj2025

I am very new to SolarWinds and query language. I am trying to create a custom report to pull syslogs when a node throws a message for AAA Server Down. Below is what I have so far, but when I try to preview it the whole platform slows down, almost becomes unresponsive, and nothing comes up. 

SELECT TOP 10  ToLocal(l.DateTime) AS LocalTime, l.LogEntryID, l.LogEntryTypeID, l.LogEntryLevelID, l.NodeID, l.Message, l.Level, l.LevelKey, l.DisplayName, l.Description

FROM Orion.OLM.LogEntry l

LEFT JOIN Orion.Nodes n on n.NodeID = l.NodeID

WHERE l.Message = '%AAA Server Down%'

AND n.Vendor = 'Cisco'

AND l.Level != 'Unknown'

ORDER BY LocalTime DESC

I appreciate any help you can offer.