I want to see syslog entries that have triggered the alert, but the swql studio AlertMessage table seems to be greyed out and nothing returns when I query the table
The blue (i) indicates that this is a "System.Indication" type of entity - and not a "System.Entity." My understanding is that they are "internally" used to have the Orion API send messages to itself about various events occurring on the platform.
You'll most likely need to look at Orion.OLM.LogEntry for the entries and then use the Navigation Property to get it back to the Node Name (Caption).. That said, the alerting mechanisms behind Log Manager/Log Analyzer are different insofar as calls when compared to the ones for "traditional" Orion Alerts. I'm going to ask a few people around here and see if there's something I'm missing.
If these are raising a traditional Orion alert (like below)
There may be a way to stitch them together using the logic from the Orion.AlertConfiguration (and other) entities.
