If a user acknowledges an alert, the details will be recorded (username and time).
It will be very handy if we also have the same information for events as well, since Orion doesn't keep track of users acknowledging events.
You can create a report to do this: Acknowledged+Alerts.xml
It uses SWQL to query the AlertStatus table, which contains the detail you're after.
Yep, came here to say this. Then you just add a custom query resource to a view if you want to display it in a more active/dashboard type scenario.
I mean it'd be good to see it as a default resource you don't have to write yourself, but at least there's a workaround.
Nathan HejnickiLoop1 Systems
Thank you for your post, but is this valid for all events, or specific to alerts only?
