Hi,
I am collecting events data using SWQL studio, here I want to know whether the alert are also part of events or not. If alerts are part of events, then how can relate both.
Please suggest.
Thanks in advance...
Regards,
Manoj
manudharm I believe alerts and events are two separate things. You can have an alert trigger based on some event. And you can create/log events within an alert. If you want to link them, you would need to have enough information in both the event/log and alert. Otherwise, you could join the Orion.Events table on the "NetworkNode" and/or "NetObjectID" columns, and the "RelatedNodeId" column of the Orion.AlertObjects table.
Going forward, you could always just create an event when your alert triggers, and just format your event message in an easy to parse format. Then, you should be able to see everything you need in a single event message, and should be able to pull metrics that way.
Please let us know how it goes.
Thank you,
-Will
Thank you Wluther
