Hey folks - prior to the 11.5 upgrade, I had the following query in all my alerts for a down device. This worked great.
${NodeName} is reported as DOWN (Ping) for ${SQL:select top 1 datediff(minute,logdatetime,getdate()) as downtime from alertlog where message = 'Alert Triggered'} minutes.
However - after the upgrade to NPM 11.5 and SAM 6.2, All my alerts are showing things are down for 18k minutes..
Is there a better way to determine how long a node/interface has been down AS we build the alert to email staff?
<EDIT> ok - it appears that my NPM/SAM is no longer updating the AlertLog table. My query is still working correctly, but because the table hasn't been updated since 2/13...... great..