cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 11

Modifying last 50 Global Events SWQL to show error and restart only?

Hi All,

I need some assistance in modifying the below SWQL which is used by the builtin report Last 50 Global Events, to show Reboot, Error & Critical only?

SELECT TOP 50 
                                   et.NAME, 
           Tolocal(e.eventtime) AS eventtime, 
           e.eventtype, 
           e.message, 
           e.instancesiteid 
FROM       orion.events     AS e 
INNER JOIN orion.eventtypes AS et 
ON         et.eventtype = e.eventtype 
AND        et.instancesiteid = e.instancesiteid 
ORDER BY   e.eventtime DESC with nolock

URL: https://SW-MON1-VM/Orion/Reports/Add/Default.aspx?ReportWizardGuid=b6b2853a-051b-4b19-8a71-c3beb3cefb2d

Thank you in advance.

0 Kudos
0 Replies