Hi,
My question is related to the following question from the forum that is now closed, hence this new question. Here is the link to the original:
I have a brand new SAM install I built last week, so everything is latest and greatest (2023.2).
One of the solutions in that link provided by @mesverrum and working for @cmarti is (with slight edits by myself):
SELECT
tolocal(Timestamp) as Timestamp,
cs.Component.ApplicationID,
cs.Component.Application.Node.dns as Hostname,
cs.Component.Application.Name as ApplicationName,
cs.Component.Name as component,
cs.ComponentID,
cs.DynamicEvidence.ColumnLabel as Label,
cs.DynamicEvidence.StringData as StringData,
cs.DynamicEvidence.AvgNumericData
FROM Orion.APM.ComponentStatus cs
order by timestamp desc
There is over 15,000 records that covers 5 days. AvgNumericData contains values that make sense. That all makes sense. My issue is StringData is always NULL which is not the expected result.
Am I missing something here? Is my expectation that StringData should contain something other than NULL not correct?
If you have any applications with Windows Powershell Monitor components running, can you run the above query in SWQL Studio and report the contents of StringData?
TIA :-)
