We need to count the number of utilisation alerts on some interfaces from the previous month

Question

Hello everyone,

We need to count the number of instances from the previous month of traffic utilisation alerts on some interfaces.   This selector produces the correct results, but the Edge Switch (ESW) also  has 2 interfaces that need monitoring.  When I add an OR block to pick out those two, the results from the ESW disappear.  Strangely, even if I just add one of the interfaces in the same AND block as the ESW, the results for the ESW also disappear.  Am I misinterpreting how the selector or the database are working?  Do I need to use a SWQL query? (about which I know next to nothing...)

webbdom · Answer

Thanks - that is really helpful.  I will follow that approach and see where we get.

stuartd · Answer

I don't have a direct answer, but I have found that in my early SolarWinds days I was almost certainly misunderstanding the logic. The second thing I discovered, was that for whatever reason, the GUI logic builder seems to have a limitation on the number of logic blocks.

I fairly early on discovered that if I click that little down arrow on the top line, it gave me the SWQL code for the query. Where my logic was failing, I then threw this copied code into SWQL Studio and messed around with it there.

For several reasons I now go to SWQL Studio as a default.

1. I can see the code and am very much still learning to walk through it.

2. Oddly it helps me see more clearly where I might have mis-read how to build my logic

3. It's an API so is read only and less likely to cause any major issues

Give it a go and see where you get ... - alternatively come back here with the exported code and share with us and perhaps someone might be able to spot what's going on.

HTH.