I am trying to write a custom report showing the up downs of interfaces on a group of switches. I think I am close but I can't quite get the final result I am looking for. I am just trying to show the link failure and up messages from each host and the date time it occured. All I am getting is the down messages. I am not a sql guy so please forgive me if this is extremely simple.
select datetime as Date, hostname as Hostname, message as Message from syslog where hostname like '%5010%' and message like '%(Link failure)%' OR message like '%(is up)%'