Report for triggered alerts past 1 day for 2 specified alerts only

Question

Hi All need help setting up a report for triggered alerts history for past 1 day but only on for the two alerts below

Thanks in advance

jm_sysadmin · Answer

What Information do you need in the report? Here's something that I think is close, its SWQL.

SELECT 
    AH.AlertObjects.AlertConfigurations.DisplayName as [Alert Name],
    AH.AlertHistoryID, 
    AH.EventType, 
    AH.Message, 
    AH.TimeStamp,
    AH.AlertObjects.EntityCaption, 
    AH.AlertObjects.EntityDetailsUrl, 
    AH.AlertObjects.RelatedNodeCaption, 
    AH.AlertObjects.RelatedNodeDetailsUrl
FROM Orion.AlertHistory AH
Where 
       (AH.AlertObjects.AlertConfigurations.DisplayName like 'Cisco Store Router Down'
    or  AH.AlertObjects.AlertConfigurations.DisplayName like 'Meraki Device Down (P3)' )
    and HOURDIFF(AH.TimeStamp , GetDate()) < 24 -- last day in hours
    and AH.EventType = 0 -- Event for alert trigger
Order By AH.TimeStamp DESC

jm_sysadmin · Answer

If you want the count, then try:

SELECT 
    Count( AH.AlertHistoryID) as [Alerts Triggered]
FROM Orion.AlertHistory AH
Where 
       (AH.AlertObjects.AlertConfigurations.DisplayName like 'Cisco Store Router Down'
    or  AH.AlertObjects.AlertConfigurations.DisplayName like 'Meraki Device Down (P3)' )
    and HOURDIFF(AH.TimeStamp , GetDate()) < 24 -- last day in hours

    and AH.EventType = 0 -- Event for alert trigger

But in either case that looks like the report page, so make sure your data source is using 'SWQL' if it is, then I am not sure why it doesn't run. We will have to look deeper.

Report for triggered alerts past 1 day for 2 specified alerts only

Top Replies