Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

PS newb Question / Export Alerts

Hello, I'm new to using Powershell for Orion. I am wanting to simply query a few things such as Active Alerts that I am unable to bulk export in the GUI.

In running Get-SwisObject | gm I am prompted for the uri and SwisConnection.

1. What are these parameters? I'm sure one is the DNS name, the other?

2. Is what I'm looking for even possible?

Find more posts tagged with

Accepted answers

tdanner

Start by reading PowerShell · solarwinds/OrionSDK Wiki · GitHub and Alerts · solarwinds/OrionSDK Wiki · GitHub. The commands you need are Connect-Swis (to get a SwisConnection object) and Get-SwisData (to run a query for alert info).

All comments

tdanner

matt.rpri

Thank you! This is very helpful. In reading the articles, I thought this would be the right syntax for displaying all active alerts, but getting errors:

Get-SwisData $swis 'SELECT Orion.AlertActive, Caption FROM Orion.AlertObjects'

Do you recommend an example syntax to get this going? I'll eventually want to export-csv.

tdanner

Another suggestion: when developing a new query, start in SWQL Studio. Once you are happy with the query results, then copy the query into PowerShell or whatever language to build your automation. You can download SWQL Studio here: Releases · solarwinds/OrionSDK · GitHub

Here's a basic query for getting the list of active alerts. You can fancy this up to meet your goals (filtering, sorting, more columns), but this should be a decent starting point.

SELECT AA.TriggeredDateTime, AA.TriggeredMessage, AA.AcknowledgedBy, AA.AcknowledgedDateTime, AA.AlertObjects.EntityCaption, AA.AlertObjects.EntityDetailsUrl

FROM Orion.AlertActive AA

matt.rpri

Thank you, this will def help me get things going!