I need to publish reports out of SOI as below:
1) Number of all events for last 30 days
2) Number of event/alert suppressed from last 30 days.
For the aforesaid, do we have any query(s)/script(s) available?
Note: CABI/BOXI/Jespersoft or any other reporting engine cannot be used.
Any help/guidance would be greatly appreciated...
Sorry for the delay in replying to this post. You can use the following SQL queries to achieve the results:
1) SELECT count(*) FROM Alerts where LoggedTime >= '2011-12-11 00:00:00.000'
Note: The above query will give you the number of active and inactive alerts in the table. LoggedTime is the time SOI received the alert from the domain manager/manager's. You have to adjust the date and time to your liking. If you want only the active alerts then add "and Active=1" at the end of the above query.
2) SELECT count(*) FROM Alerts where LoggedTime >= '2011-12-19 00:00:00.000' and isExempt=1
Note: In SOI alerts are hidden (if configured) when alerted CI's are in maintenance but these alert's are active alerts and will show in the count when you run the query in step 1 above. Exempted alert are those alert that don't trigger any escalation policies (unless manually triggered), these alerts are visible but greyed out in console. The second query will give you a count of the active alert that are exempted. As far as I know there are no marker for hidden/suppressed alerts, so you won't be able to query them, use the first SQL query to get the active alert count.
Thank you very much Shaheen...