This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Event Search Custom Query Resource

Prompted by some discussion with a fellow MVP, this is a simple resource that can be used to provide a basic event search for users in a Summary View.

Please note that this particular query only looks at Node events, but the framework can easily be adjusted to focus on other event types, or even include all events.

This is based on the "Custom Query" resource.

Initial Query:

SELECT

    e.EventTime AS [EVENT TIME]

    ,e.EventTypeProperties.Name AS [EVENT TYPE]

    ,e.Message AS [EVENT MESSAGE]

    ,e.Nodes.Caption AS [EVENT NODE]

    ,n.WebUri AS [_LinkFor_EVENT MESSAGE]

    ,n.WebUri AS [_LinkFor_EVENT NODE]

FROM Orion.Events e

JOIN Orion.NodeWebUri n ON n.NodeID = e.NetObjectID

WHERE e.NetObjectType = 'N'
ORDER BY e.EventTime DESC

Search Query:

--SEARCH: Event Type, Event Message, Event Node

SELECT

    e.EventTime AS [EVENT TIME]

    ,e.EventTypeProperties.Name AS [EVENT TYPE]

    ,e.Message AS [EVENT MESSAGE]

    ,e.Nodes.Caption AS [EVENT NODE]

    ,n.WebUri AS [_LinkFor_EVENT MESSAGE]

    ,n.WebUri AS [_LinkFor_EVENT NODE]

FROM Orion.Events e

JOIN Orion.NodeWebUri n ON n.NodeID = e.NetObjectID

WHERE e.NetObjectType = 'N'

AND (

    e.EventTypeProperties.Name LIKE '%${SEARCH_STRING}%' OR

    e.Message LIKE '%${SEARCH_STRING}%' OR

    e.Nodes.Caption LIKE '%${SEARCH_STRING}%'

)
ORDER BY e.EventTime DESC

Results:

2017-02-14_12-22-34.png

-ZackM

Loop1 Systems: SolarWinds Training and Professional Services