Is it possible to use SWQL to query the Syslog table? If so, can you provide a sample?
I know I can use SQL to do this in a report but want to see if I can do same in SWQL.
Thanks!
Yes, you definitely can. The following is the default query from SWQL Studio:
SELECT MessageID, EngineID, DateTime, IPAddress, Acknowledged, SysLogFacility, SysLogSeverity, Hostname, MessageType, Message, SysLogTag, FirstIPInMessage, SecIPInMessage, MacInMessage, TimeStamp, NodeID, ObservationSeverity
FROM Orion.SysLog
Thank you!