Wrong date and time in my Syslog table via SWQL

Lucas023

Hello everyone, I managed to reach a SQL call that helps me a lot, but when using this query the date is coming with a very different time and date, like a week ago.

Has anyone had a problem like this using Syslog tables via SWQL?

Note: I'm using this in a modern dashboard

My query:

SELECT TOP 100 DateTime, Level, Message, MessageDateTime, Z.Caption, Z.IP, Z.DetailsUrl, Z.Status
FROM Orion.OLM.LogEntry as Y
INNER JOIN Orion.Nodes as Z ON Y.NodeID = Z.NodeID
where Level = 'Error'

shuth

If you have more than 100 Error messages, you probably need to put an "ORDER BY MessageDateTime DESC" on the end of the query. Otherwise you are grabbing the first 100 messages in the table. With the ORDER BY on the end, you will grab the latest 100 messages.

Potentially as well, you may need a "TOLOCAL(MessageDateTime) AS LocalMessageDateTime" as I can't recall off the top of my head if that time is stored in UTC time.

SELECT TOP 100 DateTime, Level, Message, MessageDateTime, TOLOCAL(MessageDateTime) AS LocalMessageDateTime, Z.Caption, Z.IP, Z.DetailsUrl, Z.Status
FROM Orion.OLM.LogEntry as Y
INNER JOIN Orion.Nodes as Z ON Y.NodeID = Z.NodeID
where Level = 'Error'
ORDER BY MessageDateTime DESC