Recent Syslog Events by Severity

What this query does

View recent syslog messages filtered by severity level

SWQL Query

SELECT n.NodeName, s.DateTime, s.SysLogSeverity, s.SysLogFacility,
       s.Hostname, s.IPAddress, s.Message
FROM Syslog.SysLogMessages s
JOIN Orion.Nodes n ON s.NodeID = n.NodeID
WHERE s.DateTime >= ADDDATE('hour', -24, GETDATE())
  AND s.SysLogSeverity <= 3
ORDER BY s.DateTime DESC

syslog

events

severity

logging

Unlock the full POLARISNOC hub

AI-powered SWQL generation, script management, CVE tracking, and verified solution intelligence.