I have a SWQL Query with the nodeName, alertConfig, TimeStamp
from orion.alerthistory innerjoin with orion.nodes, leftJoin with orion.actions, orion.alertObjects, orion.alertconfigurations.
My Where clause is WHERE a.ActionTypeID = 'Email'
AND DAYDIFF9ah.TimeStamp, GETUTCDATE()) <= 2
ORDER BY ah.TimeStamp ASC
It works great and gives me everything i need, but as you see the TIME is UTC, so i have to subtract 5 hours to get Central Time LOL
How would I convert this in the Query?
