greskamh ✭✭✭✭✭

Not shure if I get what you want but I think you should add another AND-Block for the first conditions so it is like AND AND Appl. Name = "Fu" Status = "Up" AND Appl. Name = "…FER Service" Status = "Down"

Same as all the others - Day 8, selected the correct answer and it noted it was wrong 

We also don't get any data. Orchestrator Node is up and polling, but no further data appears in either the Orchestrator node or the SNMP nodes for days.

There is a Modern Dashboard in the Content Exchange Area from @the_ben_keen. The bottom tables show the most frequent alerts by device and the most triggered alerts(30 days). You should get the needed SWQL out of these dashboard tables.

Hi Chris, easiest way should be the "TO-LOCAL"-Function: SELECT TOP 10 TOLOCAL(E.EventTime) as [Event Time], E.EventTypeProperties.Name as [Event Type], E.Message as [Event Message] , N.Caption as [Node Name], N.Status as NodeStatus, N.DetailsURL as NodeUrl , case when E.EventTypeProperties.Icon='Add' then 5 when…

Hi Ryan, as far as I know, for Modern Dashboards (not available for classic) the Time Series Graph is built only based on a perfStack Analysis, not from a swql. So for your Hardware-Values you could create a perfstack and after that you can integrate that perfstack into a modern dashboard time series widget. Looking at…

With this SWQL you can count the events of Type "Node down": SELECT COUNT(1) AS NodeDownEvents, n.DisplayName FROM Orion.Events e INNER JOIN Orion.Nodes n ON n.NodeID = e.NetObjectID WHERE EventType = 1 GROUP BY n.DisplayName The Availability of a Node is a given function in SWQL, no need to calculate manually: SELECT TOP…

Hi! As far as I know, the variables are very complex and depend on the Element-Types (Node, SAM, Hardware etc.). For the "Name" I would try ${N=SwisEntity;M=DisplayName}. I would recommend to select the variables through the "Add variable"-Link (here german: Variable Einfügen) on the right side of the "Alert Message"-Box…