Our setup has the main polling engines and three additional polling engines. Due to firewalls monitored devices send syslog to different engines. Is there a SQL or SWQL query that will show me the latest syslog received by each engine? I've been digging around in SWQL studio and can't find what I'm looking for.
By the way, the engine that receives the syslog isn't always the same engine that monitors each node so I don't think linking node_id to engines will help here.