Alert trigger message SWQL Macro help

jajao555

We have UDP setup to poll Juniper BGP status because the built in BGP MIB poller doesn't include IPv6 peers. I would like to have the message and NPM event to include the peer IP that went down because the object only shows an arbitray index number from the label the UDP poller was setup with.

Here's the SWQL query for the alert trigger. This part works fine its the message part I'm confused about.

I can't figure out how to use the variables and how these tables relate to the in the trigger. I used the built in GUI to find some of the syntax but I don't understand why the query for '38d09ad6-83c2-4d9e-83c6-671a807f6aa5' doesn't pull the Status to line up with what the alert triggered on?

Here's what I see in the alert message

In SWQL the query works

jajao555

I figured out my issue. I needed to use the same Orion.NPM.CustomPollerStatusOnNodeTabular table as the alert was setup on then the variables started working.

-------------
PeerIP: ${N=SWQL;M=SELECT TOP 1
Status AS PeerIP
FROM Orion.NPM.CustomPollerStatusOnNodeTabular A

WHERE CustomPollerID = '38d09ad6-83c2-4d9e-83c6-671a807f6aa5' AND NodeID = ${N=SwisEntity;M=CustomPollerAssignment.Node.NodeID} AND DisplayName = ${N=SwisEntity;M=DisplayName}}
-------------
LocalIP: ${N=SWQL;M=SELECT TOP 1
Status AS LocalIP
FROM Orion.NPM.CustomPollerStatusOnNodeTabular A

WHERE CustomPollerID = '0b89e6ac-a550-49dd-9dbe-e60dda4825ef' AND NodeID = ${N=SwisEntity;M=CustomPollerAssignment.Node.NodeID} AND DisplayName = ${N=SwisEntity;M=DisplayName}}

I get the below in the alert trigger message now.