Morning,
I have been looking at our current alert setup and it appears that one has stopped working. The purpose of this is to alert if the node is down and part of our Production Environment (Custom node property) AND it is not part of 2 static groups for Critical and High Priority Services (because I manage their alerts separately)
It had been working fine but when a node was down today, that met that condition nothing happened and now it appears the query is broken -
SELECT Nodes.Uri, Nodes.DisplayName FROM Orion.Nodes AS Nodes
where nodes.status = 2 and nodes.customproperties.environment = 'production'
and nodes.nodeid
not IN
(select cms.entityid from Orion.ContainerMemberSnapshots cms
where (cms.container.description like '%critical%' or cms.container.description like '%high%') and cms.entitytype ='orion.nodes')
Running it through SWQL Studio returns a "Subqueries are not supported" message.
Any ideas please as this is stopping me from alerting against Production Devices that are not part of a Critical or High Priority Business Service