is there a way for me to manually enter a ticket here. IE let's say I create a ticket and want to show up here instead of when it's auto-generated by the integration?
The incident data from the SNOW integration is stored in the SWQL entity Orion.ESI.AlertIncident, so have a look at this entity to see the data you can access, but the following query may be a starting…
Did you have a look at the Orion.ESI.AlertIncident SWQL entity to see what data exists?
If you have SWQL Studio installed use that. If not and if you are not likely to do much custom querying, then navigate…
Replace in the following SWQL query the name of the column in the Orion.ESI.AlertIncident entity, which is storing the IncidentID. I do not have output in front of me, but from memory it was the IncidentID…
No, that is not how this function works. This widget will only display incidents that have been generated by the Orion alerting engine.
It is worthwhile you looking at the basics of SQL/SWQL, as if you have this requirement now you are going to have more in future. The following is the standard place to start learning - https://www.w3schools.com/sql/sql_where.asp
In the following adjustment to the previous statement, you can see I have added an AND, which means both the IncidentID field is not empty and the state field must equal a value, where you replace <value> with the value that equates to the ticket still being open.
SELECT COUNT(ID) AS IncidentCount FROM Orion.ESI.AlertIncident WHERE IncidentID IS NOT NULL AND State = '<value>'
the beauty of SWQL (SQL) is the level of control of the data you have. To give you guidance, I would expect this to help:
SELECT COUNT(ID) AS IncidentCount
WHERE IncidentID IS NOT NULL AND (State = 'Assigned' OR State = 'somethingelse')
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK© online community. More than 180,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.