Active Alerts with Node Details

What this query does

List all currently active alerts with triggering node information

SWQL Query

SELECT a.Name AS AlertName, a.Severity, a.TriggeredCount,
       a.TriggeredDateTime, ao.EntityCaption, ao.RelatedNodeCaption
FROM Orion.AlertActive a
JOIN Orion.AlertObjects ao ON a.AlertObjectID = ao.AlertObjectID
WHERE a.Acknowledged = 0
ORDER BY a.TriggeredDateTime DESC

alerts

active

monitoring

severity

Unlock the full POLARISNOC hub

AI-powered SWQL generation, script management, CVE tracking, and verified solution intelligence.