Modern dashboard query

SiddheshS

Looking for query where it shows alert count with custom property filter, something like this but it showing wrong numbers,

SELECT count(*) as AlertCount
FROM Orion.AlertActive aa, ORION.Nodes
JOIN Orion.NodesCustomProperties ON nodes.nodeid = NodesCustomProperties.nodeid
WHERE aa.AlertObjects.AlertConfigurations.Severity=2
AND
<NAME> = 'Custom Properties'

m-milligan

This should do what you need:

SELECT count(*) as AlertCount
FROM Orion.AlertActive aa, ORION.Nodes N
JOIN Orion.NodesCustomProperties NCP ON N.nodeid = NCP.nodeid
WHERE aa.AlertObjects.AlertConfigurations.Severity=2
AND
NCP.<CustomPropertyName>&nbsp;= '<CustomPropertyValue>'

For example, my Solarwinds installation has a custom property called "Department", and one of my departments is called "Sales." To get the number of active alerts for nodes with a Department called Sales, the query would be:

SELECT count(*) as AlertCount
FROM Orion.AlertActive aa, ORION.Nodes N
JOIN Orion.NodesCustomProperties NCP ON N.nodeid = NCP.nodeid
WHERE aa.AlertObjects.AlertConfigurations.Severity=2
AND
NCP.Department = 'Sales'