Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Filtering out events from "Last XX Events" and "Last XX Audit Events" reports

Hello,

Here's my problem. I'm trying to filter out certain events from specific nodes during a time span. I've played around in the report writer but can't get what I'm looking for.

For example, I can specify "select records when none of the following apply" and then "records where node is equal to ServerABC", "records where Event Type is equal to Unmanage Node" but now how do I say do this all between 4am to 4:30am?

Appreciate any feedback.

Thanks,

Shane

Find more posts tagged with

Accepted answers

All comments

mrxinu

A web-based report would do the trick:

SELECT e.EventTime, e.MessageFROM Orion.Events eJOIN Orion.Nodes n ON e.NetObjectID = n.NodeID AND e.NetObjectType = 'N'WHERE n.Caption = 'ServerABC'AND e.EventType = 40  -- 40 = unmanage nodeAND HOUR(ToLocal(e.EventTime)) = 4AND MINUTE(ToLocal(e.EventTime)) <= 30

anil.singh

time field is not present in Event report template, you have to tweak in SQL.

what I did, if this case is with me. I simply pull the report for that particular date > export to excel > filter out events between required time.

Sometime have to go with old high school days method.....\m/....

cgregors

Try this sql in a custom table resource:

NOTE: Change some_custom_property to what you need in the where clause and pick your EventTypes

select top 25

EventTime,

NetObjectID,

Events.EventType,

'<img src=/NetPerfMon/images/Event-' + LTRIM(STR(Events.EventType,10)) + '.gif> ' + '<a href=/Orion/View.aspx?View=NodeDetails&NetObject=N:' + LTRIM(STR(NetObjectID,10)) + '><font color=' + Icon + '>' + Message + '</font></a>' as Message

from

events join EventTypes on Events.EventType=EventTypes.EventType

where

NetObjectID in (select nodeid from nodes where some_custom_property = something) and

EventTypes.EventType in (1,2,5,8,9,14,40,41,100,940,941,942,3701)

order by

EventTime desc