Is there some way to pull a report that will list a group of alerts and the alert actions. Not looking for history but alert name and what it does. Thanks!
SELECT ac.AlertID, ac.Name AS AlertName, ac.Enabled AS AlertEnabled, aa.ActionAssignmentID, aa.EnvironmentType, aa.CategoryType, a.ActionID, a.Title AS ActionTitle, a.ActionTypeID, a.Enabled AS ActionEnabled, ap.PropertyName, ap.PropertyValueFROM Orion.AlertConfigurations acLEFT JOIN Orion.ActionsAssignments aa ON aa.ParentID = ac.AlertIDLEFT JOIN Orion.Actions a ON a.ActionID = aa.ActionIDLEFT JOIN Orion.ActionsProperties ap ON ap.ActionID = a.ActionIDWHERE aa.EnvironmentType = 'Alerting'ORDER BY ac.Name, aa.CategoryType, a.Title, ap.PropertyName``
This is what I have/found and it has the email actions but it does not have Teams or ServiceNow actions. I started looking around SWQL but not getting anywhere.
SELECT ac.Name, CASE WHEN ac.Severity = 2 THEN 'Critical' WHEN ac.Severity = 1 THEN 'Warning' END AS Severity, ac.ObjectType, a.Title, ap.PropertyValue AS EmailTo, ap1.PropertyValue AS EmailCC, ap2.PropertyValue AS EmailBCC, CategoryType FROM Orion.Actions a INNER JOIN Orion.ActionsProperties ap ON ap.ActionID = a.ActionID AND ap.PropertyName = 'EmailTo' INNER JOIN Orion.ActionsProperties ap1 ON ap1.ActionID = a.ActionID AND ap1.PropertyName = 'EmailCC' INNER JOIN Orion.ActionsProperties ap2 ON ap2.ActionID = a.ActionID AND ap2.PropertyName = 'EmailBCC' INNER JOIN Orion.ActionsAssignments aa ON aa.ActionID = a.ActionID INNER JOIN Orion.AlertConfigurations ac ON aa.ParentID = ac.AlertID WHERE CategoryType IN ('trigger', 'Reset') AND ActionTypeID = 'Email' AND ac.Enabled = 1 -- AND ac.Name LIKE '%AIX%' --AND ac.Name='Alerta Alto Carga CPU AIX PRD Critical' ORDER BY ac.Name
