Dears
Thansk for the wonderful community
What is the query we can fetch the active alerts on weekly basis , ? kind of historical data
Thanks for your response.
There is an out the box report 'Triggered Alerts - Last 30 Days web-based'. If you need anything specific in your output, use this as a starting point by duplicating it and extending.
Come back if you need help.
Thanks for your response ,
Can you share the SWQL Query for fetching the active alerts - weekly basis pls
Can you also share the sQL query to fetch severity of all ACtive Alarms
@basilfernandaz, take a look at this query found in the content exchange. In the future, the Content Exchange is a great place to start looking when trying to find queries, reports, etc.
Dear Christopher , Thanks for the response ,
I have the below query to fetch the severity of the active alerts ,
attached the snapshot of the existing query to fetch severity. attachment fyi.
Once i get aggregated data ......i can feed ito create pie chart .
@basilfernandaz, try this query
SELECT count(o.AlertActive.TriggeredDateTime) AS [ALERT TRIGGER TIME] ,CASE WHEN o.AlertConfigurations.Severity = 1 then 'Critical' WHEN o.AlertConfigurations.Severity = 2 then 'Serious' WHEN o.AlertConfigurations.Severity = 3 then 'Warning' WHEN o.AlertConfigurations.Severity = 4 then 'Informational' WHEN o.AlertConfigurations.Severity = 5 then 'Notice' END AS [Severity] FROM Orion.AlertObjects o WHERE o.AlertActive.TriggeredMessage <> ''GROUP BY O.AlertConfigurations.Severity