Historical Alerts showing in UTC time

Question

Have an issue where the Historical Alerts resource is showing the alert date/time (for both alert and reset) are showing in UTC time, all of our SW environment and monitored devices are in US Eastern time zone    How can this be corrected to show local time?

aldo56 · Answer

Here is the swql I used to create the Historical Alerts resource, (previously 1st line was SELECT E.EventTime, N,Caption, C.Name, E.message  and that returned in UTC)

SELECT  AddHour(-4,E.EventTime) as EventTime, N.Caption, C.Name, E.Message

FROM Orion.Events E

JOIN Orion.APM.Application C on C.ApplicationID=E.NetObjectID

JOIN Orion.Nodes N on N.NodeId=E.NetworkNode

Where E.NetObjectID=${ApplicationID}

order by EventTime desc

mesverrum · Answer

There is no Out of the box resource for Historical Alerts, I suspect someone may have written a custom SWQL resource for you.  If you hit the edit button on that resource can you screenshot what it looks like?

If it looks like a big SQL/SWQL query then you probably just need to wrap the timestamp with a tolocal() function.

aldo56 · Answer

Found a fix  (in case anyone needs it)  I was doing a SELECT E.EventTime      had to change it to  SELECT AddHout(-4,E.EventTime) as EventTime   and it corrected it showing the proper time