SWQL Library
Events
SELECT
Verified Working

Orion Event Log - Node Status Changes

What this query does

Track when nodes changed status (up/down/warning) in the last 24 hours

SWQL Query
SELECT EventTime, NetworkNode, EventType,
       Message, Acknowledged, EngineID
FROM Orion.Events
WHERE EventTime >= ADDDATE('hour', -24, GETDATE())
  AND EventType IN (1, 2, 3)
ORDER BY EventTime DESC
events
status change
nodes
audit
Source:OrionSDK GitHubยท SolarWinds Orion SDK GitHubView original

Unlock the full POLARISNOC hub

AI-powered SWQL generation, script management, CVE tracking, and verified solution intelligence.

Sign Up Free