Need help on SWQL custom query for alerts.

deepak.md

I have a SWQL custom query to get Critical alerts and warning alerts based on custom property, but I'm getting wrong value in it. Please help.

SELECT count(*) as AlertCount
FROM Orion.AlertActive aa, ORION.Nodes N
JOIN Orion.NodesCustomProperties NCP ON N.nodeid = NCP.nodeid
WHERE aa.AlertObjects.AlertConfigurations.Severity=2
AND
NCP.<CustomPropertyName>&nbsp;= '<CustomPropertyValue>'

LeBeauUK

SELECT count(AlertActiveID) as AlertCount

FROM Orion.AlertActive aa --Remove Orion.Nodes N 

JOIN Orion.NodesCustomProperties NCP ON aa.AlertObjects.RelatedNodeId = NCP.NodeID

WHERE aa.AlertObjects.AlertConfigurations.Severity=2 and NCP.<CUST FIELD> = '<CUST RECORD>'

Hope this helps, as This is something I think might be useful on the dashboards that I am looking to make, thanks for the idea.