Home

SWQL Query Library

Browse verified SolarWinds SWQL queries for the Orion Platform. Copy production-ready queries for monitoring, reporting, and troubleshooting — no login required.

IPAM
POLARISNOC Certified

IPAM Subnet Utilization Report

Show all subnets with IP utilization percentage and available IP count

View query & code
Groups
POLARISNOC Certified

Node Group Membership Report

List all nodes and the Orion groups they belong to for topology reporting

View query & code
VNQM
POLARISNOC Certified

VNQM VoIP Call Quality Statistics

Monitor VoIP call quality by MOS, jitter, and packet loss per endpoint pair

View query & code
NCM Configs
POLARISNOC Certified

NCM Compliance Policy Violations

Find all devices failing NCM compliance policy rule checks

View query & code
NPM
POLARISNOC Certified

Node CPU and Memory Utilization

Get real-time CPU load and memory utilization for all up nodes

View query & code
NPM
Verified Working

Nodes with Response Time Above Threshold

Identify nodes with ICMP response time exceeding 100ms

View query & code
NPM
POLARISNOC Certified

Node Hardware Inventory Summary

Export hardware inventory including machine type, OS, and serial number

View query & code
NPM
Verified Working

Nodes Added in Last 7 Days

Audit recently added nodes to detect unauthorized device additions

View query & code
Interfaces
Verified Working

Down Interfaces by Node

List all administratively or operationally down interfaces grouped by node

View query & code
Interfaces
POLARISNOC Certified

Interface Error and Discard Rate

Identify interfaces with excessive errors or discards indicating hardware or congestion issues

View query & code
Volumes
Verified Working

All Volumes with Capacity Details

Export all monitored volumes with full capacity metrics for capacity planning

View query & code
Alerts
Verified Working

Alert History Last 24 Hours

Review all alert events that triggered or cleared in the last 24 hours

View query & code
Alerts
POLARISNOC Certified

Top 10 Most Frequent Alerts

Identify which alert definitions are firing the most to prioritize tuning

View query & code
SAM
POLARISNOC Certified

SAM Application Component Non-Up Status

Find all SAM application components that are not in an Up state

View query & code
Applications
Verified Working

SAM Applications with Alert Status

List all monitored applications with their overall health and alert state

View query & code
Components
POLARISNOC Certified

SAM Component Response Time and Threshold

Monitor SAM component response times against their configured warning and critical thresholds

View query & code
NCM Configs
Verified Working

NCM Devices Without Recent Config Backup

Find NCM-managed devices that have not had a config backup in 7+ days

View query & code
IPAM
POLARISNOC Certified

IPAM Subnets Near Exhaustion

Alert on subnets with fewer than 10 available IP addresses remaining

View query & code
NTA
POLARISNOC Certified

NTA Top Talkers by Total Bytes

Identify top source-destination pairs by total bytes in the last hour

View query & code
NTA
Verified Working

NTA Application Traffic Breakdown

Break down traffic by application type to understand bandwidth consumption

View query & code
UDT
POLARISNOC Certified

UDT Endpoints Not Seen in 30 Days

Identify stale endpoint records that have not connected in 30+ days for cleanup

View query & code
VMAN
POLARISNOC Certified

VMAN Running VMs by CPU Load

Get CPU and memory utilization for all running virtual machines

View query & code
VMAN
Verified Working

VMAN Hosts with High Memory Contention

Find VMware hosts with memory balloon or swap activity indicating contention

View query & code
Polling Engines
POLARISNOC Certified

Polling Engine Load and Capacity

Review polling engine load distribution to identify overloaded engines

View query & code
Events
Verified Working

Orion Event Log - Node Status Changes

Track when nodes changed status (up/down/warning) in the last 24 hours

View query & code
Custom Properties
POLARISNOC Certified

Nodes Missing Required Custom Properties

Find nodes that are missing key custom properties required for CMDB or alerting

View query & code
Groups
Verified Working

Group Health Status Summary

Get the overall health status of all Orion groups for dashboard views

View query & code
PerfStack
POLARISNOC Certified

PerfStack Correlated Performance Issues

Find nodes with simultaneously high CPU, memory and packet loss for PerfStack correlation

View query & code
Reports
Verified Working

Scheduled Reports List with Last Run

List all Orion scheduled reports with last execution time and schedule info

View query & code
Dashboards
Verified Working

Dashboard View Count and Owner

List all Orion views (dashboards) with owner and last access information

View query & code
Nodes
POLARISNOC Certified

Nodes by Location and Site Code

Group and count nodes by physical location for site-level capacity reporting

View query & code
Nodes
Verified Working

Unmanaged Nodes

List nodes currently set to unmanaged to audit or restore monitoring

View query & code
Interfaces
POLARISNOC Certified

Top 10 Most Utilized Interfaces

Identify the top 10 busiest interfaces for performance trending

View query & code
NPM
Verified Working

SUBSCRIBE to Node Status Changes

Real-time subscription to node status changes using SWQL SUBSCRIBE syntax

View query & code
Reports
POLARISNOC Certified

Monthly Alert Count by Severity

Aggregate alert counts by severity level for monthly trending reports

View query & code
Reports
Verified Working

Node Availability Percentage Last 30 Days

Calculate node availability percentage over the last 30 days for SLA reporting

View query & code
POLARISNOC Certified

PerfStack Metric Correlation Query

Correlate node performance metrics for PerfStack timeline analysis

View query & code
POLARISNOC Certified

NetPath Path Latency and Packet Loss

Check NetPath probe results for latency spikes and packet loss

View query & code
POLARISNOC Certified

VMAN VM Resource Utilization

Get virtualization resource utilization for all monitored VMs

View query & code
POLARISNOC Certified

UDT User Session Tracking

Track active user sessions and their network endpoint associations

View query & code
POLARISNOC Certified

NTA Top Talkers by Traffic Volume

Identify top network talkers by total bytes transferred

View query & code
POLARISNOC Certified

WPM Transaction Step Performance

Monitor web performance transaction step durations and failure rates

View query & code
POLARISNOC Certified

Recent Syslog Events by Severity

View recent syslog messages filtered by severity level

View query & code
POLARISNOC Certified

Polling Engine Load Distribution

Check polling engine load and number of assigned nodes per engine

View query & code
POLARISNOC Certified

Custom Properties on All Nodes

Export all node custom property values for inventory reporting

View query & code
POLARISNOC Certified

Volume Disk Space Utilization

Find all volumes with disk usage above 85% capacity

View query & code
POLARISNOC Certified

NCM Config Change Audit - Last 24 Hours

Identify all devices with configuration changes in the last 24 hours

View query & code
POLARISNOC Certified

SAM Application Component Status Overview

Get all application components with their current status and responsible node

View query & code
POLARISNOC Certified

Active Alerts with Node Details

List all currently active alerts with triggering node information

View query & code
POLARISNOC Certified

All Interfaces with High Utilization

Find interfaces exceeding 80% in or out utilization

View query & code
POLARISNOC Certified

Node CPU and Memory Utilization Summary

Get current CPU and memory load for all monitored nodes

View query & code
POLARISNOC Certified

Get All Down Nodes with IP Address and Vendor

Identify all nodes that are currently down with their IP and vendor info

View query & code

Need a query that's not here?

Sign up for the AI Assistant to generate custom SWQL queries from plain English, plus access the full verified vault and solution intelligence.

Sign Up Free