I create a critical interface widget. Once an interface is down I can see the interface name there on the widget. But if any Palo Alto device interface goes down its not appearing. Please verify whether the SWQL is correct or not?
select ONI.caption as InterfaceCaption, ONI.StatusDescription, ONI.Node.Caption, ONI.DetailsUrl, ONI.Node.IP_Address from orion.npm.Interfaces ONI where ONI.StatusDescription like 'Down' or ONI.StatusDescription like 'Unreachable' or ONI.StatusDescription like 'Shutdown‘