Solarwinds alert action custom query not working

I am in the process of moving over from WHD to SolarWinds Service desk.

In our WHD implementation we used emails to the WHD to create tickets from alerts, I am now trying to move over to the Service Desk alert action and some of the field I would pull through SWQL queries are no longer working, it just shows the query and not the value. The same query works with the email version and if I run the query through SWQL studio it works as well.

an example of one that I'm trying to bring over is on the nodes to get the last successful install time for windows updates, as well as the Important and Optional counts of available updates. The queries are below, anyone have any idea on how to make these work.

${N=SWQL;M=Select ImportantCount From Orion.AssetInventory.WindowsUpdates WHERE NodeID=${N=SwisEntity;M=NodeID}}

${N=SWQL;M=Select OptionalCount From Orion.AssetInventory.WindowsUpdates WHERE NodeID=${N=SwisEntity;M=NodeID}}

${N=SWQL;M=Select ToLocal(LastSuccessInstallTime) AS Last_Install From Orion.AssetInventory.WindowsUpdates WHERE NodeID=${N=SwisEntity;M=NodeID}

Find more posts tagged with

Alert

swsd

SWQL

Accepted answers

All comments

KMSigma.SWI

Forgive me for starting with a simple question, but was there a reason you didn't just copy the original WHD alert and change the alert action to point to your SWSD's email address instead? This seems like it would be the easiest solution.

Any chance you can export the Alert and attach the XML (Insert, Image/video/File) so we can look at the whole thing?

tszilagyi

Perfectly valid question,

As for the reason the integrated alert action allows for two way communication between Orion and SWSD so i can see the active tickets and their status in Orion and some basic notes. Also with the CMDB integration activated it also links the tickets to the node for history of alerts (I have one type of alert that I'm having trouble linking but that's another story).

The emails alerts don't do this, that's the main reason for the change.

I will update with some more info later today, but I think I have found a solution some what, I'm not 100% happy with it but its a start. When I have some time to get all the notes together i will update, but the quick version is the html cod only works if embedded in the "Messages displayed" section on the trigger action page, rather than being one of the fields that are inside of the actual action itself like I would do with the emails.