Did some more testing and it seem as soon as I add there where clause no data comes back. When doing the same exact query in SWQL Studio it works fine
Do you have a view limitation applied to the dashboard?
Thanks a lot, that did it. I had a limitation define on the view once that was remove the query worked.
I've checked that your query works fine and since the where clause is making the difference I also suspect limitations. If that would be an account limitation, you could easily check in SWQL studio by logging as user you log into Orion. However, view limitations are bind to view. Could you please clarify whether you have any limitations applied?
Furthermore, I'd try a simplified version that does not contain any rendered node reference which is most probably where it gets filtered.
SELECT [AC].[Name] AS [Alert]
FROM [Orion].[AlertActive] AS [AA]
JOIN [Orion].[AlertObjects] AS [AO] ON [AA].[AlertObjectID] = [AO].[AlertObjectID]
JOIN [Orion].[AlertConfigurations] AS [AC] ON [AO].[AlertID] = [AC].[AlertID]
WHERE [AO].[AlertIncident].[AssignedTo] = 'Global Network Services'
Thanks a lot also for the reply, it was account limitation that cause the issue. I will also try your simplified version.
I also have same concern, we have around thousands of active alerts, wants to assign them to respective team but unable fetch the details.
I want the details like alert details, node name, triggered message ,assignment group(custom property).
the assignment group is created respective alert like node, interface, volume, application etc.