Hi All,
Trying to create a modern dashboard that displays the total number of acknowledged and unacknowledged alerts for a certain group.
I'm currently working on active Unacknowledged alerts using the SWQL query shown below.
--Unacknowledged Alerts
SELECT COUNT(AlertActiveID) AS UnacknowledgedAlertCount
FROM Orion.AlertActive
JOIN Orion.Container ON ContainerID = AlertActiveID
WHERE IsNull(Acknowledged, 0) = 0
AND ContainerID = 100 --100 is the container ID of the group
But the outcome does not match what we see in the application console for the specific technology.
Any help with review and correction will be much appreciated.