Good afternoon,
I'm looking for a way to count how many alerts were triggered in the past X days. The Alert that was triggered is irrelevant, I just want to know how many were triggered. I've poked around w/ the Web Based and Orion Report writer (neither of which I'm savvy with) and I haven't found a way to do it. Because I need to learn SWQL (for a multitude of reasons) I've begun testing what I can unearth there. I'm guessing that I'll have to use the TriggeredDateTime (System.DateTime) and "measure" from there for X days, I'm just oblivious how to do it.
Disclaimer, I'm less than a novice on things SQL so SWQL is just as foreign.
In the Orion.AlertActive table I'm able to generate the generic select statement:
SELECT TOP 10 AlertActiveID, AlertObjectID, Acknowledged, AcknowledgedBy, AcknowledgedDateTime, AcknowledgedNote, TriggeredDateTime, TriggeredMessage, NumberOfNotes, LastExecutedEscalationLevel
FROM Orion.AlertActive
and it returns the data I'd be using, but how do I go about counting how many were triggered over the last 30 days?
Thanks for any help.
WR