SWQL Library
Alerts
SELECT
Verified Working

Alert History Last 24 Hours

What this query does

Review all alert events that triggered or cleared in the last 24 hours

SWQL Query
SELECT AlertName, AlertMessage, State, Acknowledged,
       AcknowledgedBy, TriggeredDateTime, AlertObjectID
FROM Orion.AlertHistory
WHERE TriggeredDateTime >= ADDDATE('hour', -24, GETDATE())
ORDER BY TriggeredDateTime DESC
alerts
history
audit
24h
Source:THWACK KBยท SolarWinds THWACK Knowledge BaseView original

Unlock the full POLARISNOC hub

AI-powered SWQL generation, script management, CVE tracking, and verified solution intelligence.

Sign Up Free