Syslog events want to setup a scheduled report setup.

nmoura38

How can I schedule reports from OLM database(FROM dbo.OrionLog_LogEntryMessageView) have a working query on the database side, but not on reporting. but the query does work which I assume report know nothing about it. im not given a error but invalid query.

i tried to do the same query in a dashboard and got a better error "table does not exist"

I'm thinking of reverting back to old syslog system.

any help would be great.

SELECT Replace(Replace(Replace(SubString(Message, 34, 15), 'U', ''), 'R', ''), 'I', '') as SourceAddress, COUNT(*) as AlertCount
FROM dbo.OrionLog_LogEntryMessageView LEMV
join dbo.OrionLog_LogEntryView LEV on LEV.LogEntryID = LEMV.LogEntryID
Where Message like '%asm:asm%' and DateTime > (GetDate()-1)
GROUP BY Replace(Replace(Replace(SubString(Message, 34, 15), 'U', ''), 'R', ''), 'I', '')

m_roberts

Hi

As the OLM database is separate from the Orion core, you are advised to use the SWQL based method to query the OLM data.

In SWQL, the entity container Orion.OLM has a number of entities within, with the following screenshot likely the areas you are interested in:

(Taken from SWQL Studio)