Report to show Active alerts for custom property nodes

I am trying to create a dashboard that contains several groups of critical devices . I would like to show any alerts that gets triggered for the nodes only in those group. I have these nodes added in custom property and would like to display any alerts triggered by these nodes in a form of reports. Can anyone help me with a SWQL query to show all triggered alerts for a particular custom property with node name, alerts name , etc.,

Find more posts tagged with

Alert

sam

Application

sql

dashboard

SWQL

npm

server

Group

custom

report

Accepted answers

All comments

steshi

SWQL is something I'm learning slowly, I think your basic query will be something like this:-

SELECT

AA.AlertObjects.Node.DisplayName,

AA.AlertObjects.Node.CustomProperties.AssetType,

AA.AlertActiveID,

AA.AlertObjectID,

AA.Acknowledged,

AA.AcknowledgedBy,

AA.AcknowledgedDateTime,

AA.AcknowledgedNote,

AA.TriggeredDateTime,

AA.TriggeredMessage,

AA.NumberOfNotes,

AA.LastExecutedEscalationLevel

FROM Orion.AlertActive AA

where AA.AlertObjects.Node.CustomProperties.AssetType LIKE '%Service%' --replace the custom property name and wildcard with your own

Order by AA.AlertObjects.Node.DisplayName

koushikkr

Can we replace it with Multiple Wildcard?

steshi

Yes, like this:-

where AA.AlertObjects.Node.CustomProperties.AssetType LIKE '%service%' or AA.AlertObjects.Node.CustomProperties.AssetType LIKE '%service%'