John W Johnson · Systems Engineer

Well, I finally figured it out... ,ADDHOUR(-5,ah.TimeStamp) as LocalTime This worked great for me...

AND DAYDIFF(ah.TimeStamp, GETUTCDATE()) <= 2 

Nope, I like it just the way it is AWESOME!! Thanks

and, why does this only pull 615 rows?

What is event type 6? If i go to the EventTypes Table, there is no 6 or 7...

AWESOME

That report is pretty... LOL it only shows the communications group, and the custom attributes.. To: ${N=SwisEntity;M=Node.CustomProperties.Notification_Group_Required} <br/>From: ${DefaultEmailFrom}<br/>Subject: Application "${N=SwisEntity;M=ApplicationAlert.ApplicationName}" on ${N=SwisEntity;M=Node.Caption} is currently…

yeah... i'm having problems with my join... i want to be able to view the events that occur, the node associated with the event, the message, and the email message, and the email TO..

Well... how would i find all alerts the generate an email... and then filter by group that the email was sent to? Our groups i.e. IS-Technical-Communications, IS-Technical-Desktop, IS-Technical-Infrastructure, IS-Technical-Operations, etc...

Sorry.. @"sum_giais" Your answer is the one that is working! thanks for your assistance!!

@"christopher.t.jones123" I was able to get it to work with some easy mods to what you provided.. Thank you, Sir!! Thanks to you as well @"sum_giais" for your assistance!!!

doesn't help... but thanks for your time...

So, I was able to select one node this way... $query = @" SELECT n.Caption ,n.IP_Address ,n.Uri ,n.CustomProperties.ServiceNow_Owner_1 FROM Orion.Nodes AS n WHERE n.Caption LIKE 'JWJ-MAN01' "@

That would be the option for multiple nodes... 

$query = @" SELECT n.Caption ,n.IP_Address ,n.Uri ,n.CustomProperties.ServiceNow_Owner_1 FROM Orion.Nodes AS n "@ Awesome, this worked but pulled 3700 servers... LOL how would i filter it? like by caption or subnet?

So, We have thousands of servers... lets say i want to only one server $nodes = Get-SwisData $swis 'SELECT NodeID, Caption, DNS, IPAddress, Uri FROM Orion.Nodes WHERE Caption -eq 'jwj-man01''I have tried this, but it doesn't work...If the powershell script asked me, 'what node do you want to modify'i could put the node…

That's pretty intense LOL The nodes I will be modifying are already in SolarWinds... I simply want to update the custom properties... If these custom properties have data or are null, i want to be able to update them in powershell.. I appreciate your help, and have been working on this since March.. LOL

Beat me to it... Looks good Mr. Jones!

Sorry, i will have to see your version of the code... for example.. your query will not work unless you comment out line 7... show your version of the code for assistance

Show me what you have tried, and the error you receive, please Also, are you using SQL? or SWQL Query?

If you are trying to use SQL... try this... SELECT * from ( SELECT StartTime.EventTime AS DownEventTime, (SELECT TOP 1 EventTime FROM Events AS Endtime WHERE EndTime.EventTime >= StartTime.EventTime AND EndTime.EventType = 5 AND EndTime.NetObjectType = 'N' AND EndTime.NetworkNode = StartTime.NetworkNode AND EventTime IS…

In swql, verify your tables...

have you tried my query above?

for your error... try changing 'Nodes.' to 'Node.'

When I try to run his Query in SWQL Studio I get an error 

Are you trying to run this query in SWQL Studio?

there are actually two different scripts above... which are you using? The one that I posted? or the one that sten posted? can you post the exact script you are trying to use?

Also, the above query is not for SQL.. it is for SWQL

If you would, please give us more details on what you are trying to do? Maybe you can post your exact code??

hmmm I can actually see all the 'Action ID's' with email by using this... SELECT ActionID, PropertyName, PropertyValue FROM Orion.ActionsProperties AS AP Where AP.PropertyValue = '${DefaultEmailBCC}' However... I don't know UPDATE [dbo].[ActionsProperties] SET…