Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Which table/view to use for alert history report - APM_DynamicEvidence_DetailData or AlertHistoryView

Hi,

What table or view should be used to generated a report based on the last 30 days of Alerts using the Message text of the Statistics/Message output?

AlertHistoryView seems to have all of the write-host statements that were output including the Message data.

APM_DynamicEvidence_DetailData seems to have just the data I want but doesn't have a timestamp field.

Suggestions would be appreciated.

Thanks,

Victor

Find more posts tagged with

Accepted answers

All comments

vtischuk

btw, these are custom powershell scripts...

njoylif

depends on what you need. the view will [probably] be a few tables mashed together.

I typically go into SSMS (sql mgmt server client tool) and create view to query to see what the logic is that builds the table.

see if it gives you what you need (assuming you have access or can get from DBAs).

Great opportunity to learn the schema

stats/msgs can come from different types of checks so...if the view doesn't pull in the dynamic evidence, that might be your best bet. if it does, you're golden.

vtischuk

how do I find the timestamp for the statistic/messages? i.e > than 30 days ago?

There are no populated timestamp colaumns in

APM_DynamicEvidence_DetailData DD

APM_DynamicEvidence_Detail

APM_DynamicEvidenceColumnSchema

also...the alerthistoryview has very sparse data..

Thanks,

Victor

njoylif

backing up a step; I assume you are keeping at least 30 days of detailed data in your retention settings. If not, you might want to do that.

correct, to get all of that, you have to join the appropriate tables together, probably based on the componentID or statusHistoryID? depending on what tables you are trying to look at.

so, if I look at the APM_DynamicEvidence_DetailData table, I have a ComponentStatusID and ColumnSchemaID...now what table(s) should that tie to so I ultimately tie to alerts/components tables...

looking at table list...probably APM_ComponentStatus_Detail for the statusID

and probably APM_DynamicEvidenceColumnSchema for the schemaID

Actually, looks like tied to the dynamic evidence table would do it..it has timestamp.

select top 100

de.*,cs.TimeStamp

FROM APM_DynamicEvidence_DetailData de

join APM_ComponentStatus_Detail cs ON de.ComponentStatusID=cs.ID