Recently I discovered multiple alerts that were showing very bizarre generated SWQL queries. After the 8th trigger condition value, the values are replaced by the node name.
An example of the generated SWQL, which should contain ONLY ONE INSTANCE of the value 'NodeName'
SELECT E0.[Uri], E0.[DisplayName]
FROM Orion.APM.Wstm.Task AS E0
WHERE ( ( ( E0.[Node].[UnManaged] = '0' ) AND ( E0.[Node].[Caption] = 'NodeName' ) AND ( E0.[Name] NOT LIKE 'Optimize Start%' ) ) AND ( ( NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'The operation completed successfully.' ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'The task is ready to run at its next scheduled time.' ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'The task is currently running.' ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'The task will not run at the scheduled times because it has been disabled.' ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'The task has not yet run.' ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'There are no more runs scheduled for this task.' ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'One or more of the properties that are needed to run this task on a schedule have not been set.' ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'NodeName'0 ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'NodeName'1 ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'NodeName'2 ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'NodeName'3 ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'NodeName'4 ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunResult] = 'NodeName'5 ) AND NOT ( E0.[ScheduledTaskAlert].[LastRunTime] IS NULL ) ) ) )
Per SolarWinds support, these alerts are too complex to evaluate. They evaluate fine, but the SWQL doesn't get generated correctly. I've confirmed the query stored in the database does not exhibit this problem.
