Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Active Alerts associated with Node Custom Property

I need a custom table for a NOC View that shows the same data as the default "Active Alerts" widget: Alert name, Message, Triggering Object, Active Time, Related Node -However limited so it only shows alerts for nodes with a specefic custom property.

I can not figure out how to write a working SWQL/SQL statement for this purpose, and I have not been able to find a working statement in the forums. If anybody can assist with that it would be appreciated.

It is needed so the different IT teams only sees active alerts related to the team, and not active alerts related to all teams, as the default Active Alerts shows.

Find more posts tagged with

Accepted answers

All comments

adam.beedell

This can be a but fiddly depending what alerts you've got

SELECT aa.AlertActiveID,
CASE 
  WHEN ao.AlertConfigurations.Severity = 1 then 'Critical'
  WHEN ao.AlertConfigurations.Severity = 2 then 'Serious'
  WHEN ao.AlertConfigurations.Severity = 3 then 'Warning'
  WHEN ao.AlertConfigurations.Severity = 0 then 'Informational'
  WHEN ao.AlertConfigurations.Severity = 5 then 'Notice'
  END AS [Severity]
, CONCAT('' , ao.AlertConfigurations.DisplayName, '') AS Alert 
, a.TriggerCount AS [RecentAlertCount]
, DAYDIFF(a.TriggerTimeStamp, GetUtcDate()) AS [DaysActive] 
, CASE 
  WHEN ao.RelatedNodeCaption IS NULL then  CONCAT('',ao.EntityCaption, '') 
  WHEN ao.EntityCaption = ao.RelatedNodeCaption then  CONCAT('',ao.EntityCaption, '') 
  ELSE CONCAT('',ao.EntityCaption, ' on ','', ao.RelatedNodeCaption,'') 
  END AS [On]

FROM Orion.AlertActive aa
LEFT JOIN Orion.AlertStatus a on aa.AlertObjectID = a.AlertObjectID
LEFT JOIN Orion.AlertObjects ao on a.AlertObjectID = ao.AlertObjectID
LEFT JOIN Orion.Nodes n on a.AlertObjectID = n.nodeID
WHERE 
 --aa.TriggeredMessage like '%xxx%'
--or 
ao.node.CustomProperties.CustomerName like '%xxx%'
--or ao.AlertConfigurations.DisplayName like '%xxx%'
Order by ao.AlertConfigurations.Severity Asc, a.AlertMessage ASC, a.TriggerTimeStamp DESC