Hi,

First of all, thanks for the great SDK you provide :d). I'm using the powershell api, and it works fine.

I have several questions about how to add network interface and volumes for monitoring.

My problem is how to find the network interface index and name, and how to find the volumes index and caption; Is there a way to collect them using API as in the web interface when we click on List Resources?

My second question is about when I had a volume (I get the index and the name manually) and I'm using the API (following code), i have an error on Volume Polling Details : The "Volume Polling Details " resource threw an exception..
Specified cast is not valid.

powershell Code:

$newVolProps = @{
 NodeID=$nodeProps["NodeID"]; # NodeID on which the interface is working on
 VolumeIndex=[int]$VolumeIndex;
 Status=0;
 Type ="Fixed Disk";
 Icon ="FixedDisk.gif";
 Caption=$VolumeCaption;
 VolumeDescription=$VolumeDescription;

 }
 $newVolUri = New-SwisObject $swis –EntityType "Orion.Volumes" –Properties $newVolProps
 $VolProps = Get-SwisObject $swis -Uri $newVolUri
 # register specific pollers for the node
 # Disk Poller
 
 $poller = @{
 PollerType="Poller_VO";
 NetObject="V:"+$VolProps["VolumeID"]
 }
 $pollerUri = New-SwisObject $swis -EntityType "Orion.Pollers" -Properties $poller

thanks for your help

SolarWinds & Service-Now

=====================

We’re trying to do the following (option 1 is our preferred while option 2 is a fallback):

1)

A) SolarWinds generates alert

B) SolarWinds uses a “webservice/api/sdk/other tool” to “communicate with/connect to” with the appropriate information so ServiceNow can open a ticket with the appropriate categorization, priority, whether it is internally or externally managed (ticket assignment changes depending), etc.

C) ServiceNow will communicate to the “response team” that there is a new ticket that must be addressed

D) ServiceNow will “communicate with/connect to” SolarWinds to acknowledge the alert and to record the ServiceNow ticket in to the acknowledgement notes

E) SolarWinds will register alert and set alert to acknowledged status and will include the ServiceNow ticket number

*END*

2)

A) SolarWinds generates alert

B) SolarWinds sends email notification to ServiceNow – email will need to be in appropriate form to be “absorbed”

C) ServiceNow “absorbs” email and generates a ticket with the appropriate categorization, priority, whether it is internally or externally managed (ticket assignment changes depending), etc.

D) ServiceNow “responds” to email with acknowledgement and ticket number

E) SolarWinds registers the response and sets the alert to acknowledged status and will include the ServiceNow ticket number

*END*

At this time, we’re looking for foundational materials to help us get started and determine the easiest/best way to perform one of these options and we’re hoping SolarWinds support can give us some pointers on where to researching documentation and what documentation may exist. Our hope is this is a relatively straight forward activity since it seems like it would be fairly standard that companies would want their monitoring and ticketing systems to interact. We have been rather ineffectually researching SolarWinds documentation and Thwack for roughly a week and have been unable to find the “start here” materials. We understand that the referenced SDK is not supported and we will have to use Thwack as support, however, at this point, we don’t have enough information to understand whether the SDK is our best/only option. We see in the release notes that there is the VBClient, etc. however it is unclear if this is the proscribed technique or just *A* technique.

Thanks in advance for your feedback and guidance!

I am trying to download all device configurations (latest versions) to local drive. Here is the script I tried based on modified sample scripts.

if (! (Get-PSSnapin | where {$_.Name -eq "SwisSnapin"})) {
    Add-PSSnapin "SwisSnapin"
}

 

$hostname = "xxxxx"
$username = "xxxxx"
$password = New-Object System.Security.SecureString
$cred = Get-Credential
$swis = Connect-Swis -v2 -host $hostname -cred $cred

 

$ip = 'xxxxx'
$nodeId = get-swisdata $swis "SELECT NodeID FROM Cirrus.Nodes WHERE AgentIP=@ip" @{ip=$ip}

 

$script = "show clock"

 

$nodeIdList = New-Object -TypeName "System.Guid[]" 1
$nodeIdList[0] = $nodeId

 

$configType = "Running"

 

Invoke-SwisVerb $swis Cirrus.ConfigArchive Download @($nodeIdList, "Running", $username) | Out-Null

But I am getting the below error message in response. What is the problem? Can anyone guide me? I am language agnostic, any solutions in Perl, Python or Powershell is OK.

Invoke-SwisVerb : Retrieving the COM class factory for component with CLSID {FD7ADF54-44AC-4129-A8B1-7833F06418FD} failed due to the following
error: 8007000e Not enough storage is available to complete this operation. (Exception from HRESULT: 0x8007000E (E_OUTOFMEMORY)).
At line:1 char:1
+ Invoke-SwisVerb $swis Cirrus.ConfigArchive Download @($nodeIdList, "Running", $u ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [Invoke-SwisVerb], FaultException`1
    + FullyQualifiedErrorId : SwisError,SwisPowerShell.InvokeSwisVerb

Hi,

Cross posting as didn't get a response in NPM area:

Custom SWQL resource

Thanks

Stuart

Hey all,

I am looking into creating a query in order to get all of the Alerts (eventually from a given Date/Time) for Nodes, Interfaces, etc. and am assuming that the Orion.Alerts table is the correct one to pull said information from. So, I created this query;

SELECT TOP 100 Name, Enabled, Description, StartTime, EndTime, DOW, NetObjects, Trigger, Reset, Sustained, LogFile, LogMessage FROM Orion.Alerts ORDER BY StartTime ASC

..in order to take a peek and see what I see in this table. Imagine my surprise when I saw this sample of the 16 records this query returned.

<e>
  <DOW>2,3,4,5,6,7,1,</DOW>
  <Description></Description>
  <Enabled>true</Enabled>
    <EndTime>1899-12-30T23:59:59</EndTime>
  <LogFile></LogFile>
  <LogMessage></LogMessage>
  <Name>Edge Bandwidth higher than 50% used to SCOM</Name>
  <NetObjects>,22163,22164,22173,24016,23143,14633,14648,14671,14675,15826,15844,</NetObjects>
  <Reset>&lt; 50</Reset>
    <StartTime>1899-12-30T00:00:00</StartTime>
  <Sustained>0</Sustained>
  <Trigger>> 50</Trigger>
</e>

1899?!?!?

The thing is, if I'm on the Orion web front end, and I go to the Alerts (Home > Alerts) page, all the dates are perfectly normal looking.

e.g.
  TIME OF ALERT  ALERT NAME                 ALERT TYPE NETWORK OBJECT ...
  2/5/2014 3:04 PM Alert me when any hardware component goes into a warning or critical state Advanced Te1/1 Receive Power Sensor  
  2/5/2014 3:43 AM Alert me when a neighbor goes down           Advanced 10.187.148.18  
  2/5/2014 2:13 AM Alert me when any hardware component goes into a warning or critical state Advanced subslot 0/2 transceiver 0 Tx Power Sensor

Is this some known bug, or.. ?

Signed,
Confused in Seattle 

(Scott Fraley)

Hi all,

Ok, so I have a quandry from the guy who integrates our network automation PS scripts into/onto the production boxen.

  So I did a little testing on this and got some unexpected results.

  I used the Get-SwisData command directly using the same queries that we embedded in the functions, and surprisingly the device status seldom changes from ChildStatus = 1, StatusName = Up.  Even when the device and interface were fully Unmanaged the query still returned these two values.

  Only if you are quick – and I mean really quick – and run the query at the right time just after the device has been set back to Manage, will you see it flip to ChildStatus = 0, StatusName = ‘Unknown’

  [<OurServerName>]: PS C:\Users\Uzer\Documents> $QueryToUse
  SELECT N.ChildStatus, SI.StatusName FROM Orion.Nodes N INNER JOIN Orion.StatusInfo SI ON SI.StatusId = N.ChildStatus WHERE N.NodeID = '915'
  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result = Get-SwisData $swis $QueryToUse
  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result

ChildStatus StatusName
----------- ----------
     1 Up

  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result = Get-SwisData $swis $QueryToUse
  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result

ChildStatus StatusName
----------- ----------
     1 Up

  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result = Get-SwisData $swis $QueryToUse
  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result

ChildStatus StatusName
----------- ----------
     1 Up

  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result = Get-SwisData $swis $QueryToUse
  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result

ChildStatus StatusName
----------- ----------
     0 Unknown

  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result = Get-SwisData $swis $QueryToUse
  [<OurServerName>]: PS C:\Users\Uzer\Documents> $result

ChildStatus StatusName
----------- ----------
     1 Up

Is this expected behavior, or am I looking in the 'wrong place' for this info?

Thanks,
Scott Fraley

Hello

I am trying to acknowledge alerts using the invoke method. The only example I have is in java. I need to do this in C#. I thought I converted the code but the code I have is not acknowledging the alert. Do you have a code sample of how to acknowledge alerts in C#.

Thanks

Dear Sir or Madam -

Would you please document the possible values that may appear in the  "Status"  field of the  "Orion.Nodes"  table ?

I know that value "1"  means "up"  and value  "2"  means  "down".   What other values may appear and what do they mean ?

Thank you.

James Troy

I would like to acknowledge events in the events log table via the invoke command.   Is this possible?  If not?

How do a get a list of Alerts for a specific node,  I then would like to use that information to pass into a ticketing system.

I already have the form interface, I just need to either know how the Acknowledge the Events in the Events log using the swis or SWQL or get the list of Alerts associated with a node and then Acknowledge them.

Thank you for your help.

Charles

Starting with NPM 10.4, SWIS now supports a REST/JSON API in addition to the existing SOAP API. The operations supported by each API are identical: the six basic operations of Query, Invoke, Create, Read, Update, and Delete; and the data you can access through each API is the same. The difference is that the REST/JSON API avoids the complexities of XML and SOAP, though it gives up the ability to have a client wrapper generated from WSDL.

Both APIs will be supported by the product indefinitely - the SOAP API is not deprecated or replaced by the REST API.

Request and Response Formats

Query

Request

GET https://localhost:17778/SolarWinds/InformationService/v3/Json/Query?query=SELECT+Uri+FROM+Orion.Pollers+ORDER+BY+PollerID+WITH+ROWS+1+TO+3+WITH+TOTALROWS HTTP/1.1
Authorization: Basic YWRtaW46
User-Agent: curl/7.20.0 (i386-pc-win32) libcurl/7.20.0 OpenSSL/0.9.8l zlib/1.2.3
Host: localhost:17778
Accept: */*

Response

HTTP/1.1 200 OK
Content-Length: 244
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 27 Jul 2012 19:38:52 GMT

{"totalRows":13,"results":[{"Uri":"swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=4"},{"Uri":"swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=6"},{"Uri":"swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=7"}]}

Query with Parameters

Request

POST https://localhost:17778/SolarWinds/InformationService/v3/Json/Query HTTP/1.1
Authorization: Basic YWRtaW46
User-Agent: curl/7.20.0 (i386-pc-win32) libcurl/7.20.0 OpenSSL/0.9.8l zlib/1.2.3
Host: localhost:17778
Accept: */*
Content-Type: application/json
Content-Length: 130

{"query":"SELECT Uri FROM Orion.Pollers WHERE PollerID=@p ORDER BY PollerID WITH ROWS 1 TO 3 WITH TOTALROWS","parameters":{"p":9}}

Response

HTTP/1.1 200 OK
Content-Length: 99
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 07 Aug 2012 17:36:27 GMT

{"totalRows":1,"results":[{"Uri":"swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=9"}]}

Invoke

Request

POST https://localhost:17778/SolarWinds/InformationService/v3/Json/Invoke/Metadata.Entity/GetAliases HTTP/1.1
Authorization: Basic YWRtaW46
User-Agent: curl/7.20.0 (i386-pc-win32) libcurl/7.20.0 OpenSSL/0.9.8l zlib/1.2.3
Host: localhost:17778
Accept: */*
Content-Type: application/json
Content-Length: 39

["SELECT B.Caption FROM Orion.Nodes B"]

Response

HTTP/1.1 200 OK
Content-Length: 19
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 27 Jul 2012 19:23:27 GMT

{"B":"Orion.Nodes"}

The Metadata.GetAliases verb takes one string argument and returns a PropertyBag.

Create

Request

POST https://localhost:17778/SolarWinds/InformationService/v3/Json/Create/Orion.Pollers HTTP/1.1
Authorization: Basic YWRtaW46
User-Agent: curl/7.20.0 (i386-pc-win32) libcurl/7.20.0 OpenSSL/0.9.8l zlib/1.2.3
Host: localhost:17778
Accept: */*
Content-Type: application/json
Content-Length: 92

{"PollerType":"hi from curl 2", "NetObject":"N:123", "NetObjectType":"N", "NetObjectID":123}

Response

HTTP/1.1 200 OK
Content-Length: 69
Content-Type: application/json; charset=utf-8
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 27 Jul 2012 19:27:11 GMT

"swis:\/\/tdanner-dev.swdev.local\/Orion\/Orion.Pollers\/PollerID=19"

Read

Request

GET https://localhost:17778/SolarWinds/InformationService/v3/Json/swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=6 HTTP/1.1
Authorization: Basic YWRtaW46
User-Agent: curl/7.20.0 (i386-pc-win32) libcurl/7.20.0 OpenSSL/0.9.8l zlib/1.2.3
Host: localhost:17778
Accept: */*

Response

HTTP/1.1 200 OK
Content-Length: 245
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 27 Jul 2012 19:30:02 GMT

{"PollerID":6,"PollerType":"V.Details.SNMP.Generic","NetObject":"V:1","NetObjectType":"V","NetObjectID":1,"DisplayName":null,"Description":null,"InstanceType":"Orion.Pollers","Uri":"swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=6"}

Update

Request

POST https://localhost:17778/SolarWinds/InformationService/v3/Json/swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=6 HTTP/1.1
Authorization: Basic YWRtaW46
User-Agent: curl/7.20.0 (i386-pc-win32) libcurl/7.20.0 OpenSSL/0.9.8l zlib/1.2.3
Host: localhost:17778
Accept: */*
Content-Type: application/json
Content-Length: 29

{"PollerType":"hi from curl"}

Response

HTTP/1.1 200 OK
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 27 Jul 2012 19:32:06 GMT

Delete

Request

DELETE https://localhost:17778/SolarWinds/InformationService/v3/Json/swis://tdanner-dev.swdev.local/Orion/Orion.Pollers/PollerID=16 HTTP/1.1
Authorization: Basic YWRtaW46
User-Agent: curl/7.20.0 (i386-pc-win32) libcurl/7.20.0 OpenSSL/0.9.8l zlib/1.2.3
Host: localhost:17778
Accept: */*

Response

HTTP/1.1 200 OK
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 27 Jul 2012 19:37:33 GMT

SolarWinds & Service-Now

=====================

We’re trying to do the following (option 1 is our preferred while option 2 is a fallback):

1)

A) SolarWinds generates alert

B) SolarWinds uses a “webservice/api/sdk/other tool” to “communicate with/connect to” with the appropriate information so ServiceNow can open a ticket with the appropriate categorization, priority, whether it is internally or externally managed (ticket assignment changes depending), etc.

C) ServiceNow will communicate to the “response team” that there is a new ticket that must be addressed

D) ServiceNow will “communicate with/connect to” SolarWinds to acknowledge the alert and to record the ServiceNow ticket in to the acknowledgement notes

E) SolarWinds will register alert and set alert to acknowledged status and will include the ServiceNow ticket number

*END*

2)

A) SolarWinds generates alert

B) SolarWinds sends email notification to ServiceNow – email will need to be in appropriate form to be “absorbed”

C) ServiceNow “absorbs” email and generates a ticket with the appropriate categorization, priority, whether it is internally or externally managed (ticket assignment changes depending), etc.

D) ServiceNow “responds” to email with acknowledgement and ticket number

E) SolarWinds registers the response and sets the alert to acknowledged status and will include the ServiceNow ticket number

*END*

At this time, we’re looking for foundational materials to help us get started and determine the easiest/best way to perform one of these options and we’re hoping SolarWinds support can give us some pointers on where to researching documentation and what documentation may exist. Our hope is this is a relatively straight forward activity since it seems like it would be fairly standard that companies would want their monitoring and ticketing systems to interact. We have been rather ineffectually researching SolarWinds documentation and Thwack for roughly a week and have been unable to find the “start here” materials. We understand that the referenced SDK is not supported and we will have to use Thwack as support, however, at this point, we don’t have enough information to understand whether the SDK is our best/only option. We see in the release notes that there is the VBClient, etc. however it is unclear if this is the proscribed technique or just *A* technique.

Thanks in advance for your feedback and guidance!

Trying to use the following script (based on the 'Groups' example in the SDK) to add groups based on Nodes.Location and a CustomProperty !=

if (! (Get-PSSnapin | where {$_.Name -eq "SwisSnapin"})) {    Add-PSSnapin "SwisSnapin"
}
# Connect to SWIS
$hostname = "localhost"
$username = "username here"
$password = "password here" | ConvertTo-SecureString -asPlainText -Force
$cred = New-Object -typename System.Management.Automation.PSCredential -argumentlist $username, $password 
$swis = Connect-Swis -host $hostname -cred $cred
#Set the locatoin of the csv
Set-Location 'C:\Users\username here\Desktop'
# read in csv file
$importFile="./MakeGroups.csv"
$importList=IMPORT-CSV $importFile
#iterate through each entry in csv file
FOREACH($import in $importList)
{    $SiteCode = $import.Location    $members = @(  @{ Name = "$SiteCode"; Definition = "filter:/Orion.Nodes[Location='$SiteCode' AND CustomProperties.Device_Type != 'Router']" }
)
$groupId = (Invoke-SwisVerb $swis "Orion.Container" "CreateContainer" @(    # group name    "$SiteCode",    # owner, must be 'Core'    "Core",    # refresh frequency    60,    # Status rollup mode:    # 0 = Mixed status shows warning    # 1 = Show worst status    # 2 = Show best status    0,    # group description    "Group created by the PowerShell sample script.",    # polling enabled/disabled = true/false (in lowercase)    "true",    # group members    ([xml]@(       "<ArrayOfMemberDefinitionInfo xmlns='http://schemas.solarwinds.com/2008/Orion'>",       [string]($members |% {         "<MemberDefinitionInfo><Name>$($_.Name)</Name><Definition>$($_.Definition)</Definition></MemberDefinitionInfo>"         }       ),       "</ArrayOfMemberDefinitionInfo>"    )).DocumentElement  )).InnerText     
}

Keep getting this error:

Invoke-SwisVerb : Entity Orion.Nodes does not contain requested property A

At C:\Users\username here\Desktop\MakeGroups.ps1:32 char:14

+  $groupId = (Invoke-SwisVerb $swis "Orion.Container" "CreateContainer" @(

+              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    + CategoryInfo          : InvalidOperation: (:) [Invoke-SwisVerb], FaultException`1

    + FullyQualifiedErrorId : SwisError,SwisPowerShell.InvokeSwisVerb

Looking in the DB, the script is creating the group under 'Containers', but there is not an entry being created under 'ContainerMemberDefinitions'

All help is appreciated

Folks,

I'm trying to script Application.Unmanage so that we can streamline a maintenance.  We're on a fresh install of the 1.8 SDK.

This works:

     PS> Get-SwisData $swis 'SELECT NodeID, IPAddress, NextPoll FROM Orion.Nodes WHERE Vendor=@v' @{v=$Vend}

This does not:

     PS> Invoke-SwisVerb $swis Orion.APM.Application Unmanage AA:516 2014-02-11T20:00:00Z 2014-02-11T21:00:00Z false

  Invoke-SwisVerb : A positional parameter cannot be found that accepts argument '2014-02-11T20:00:00Z'.

  At line:1 char:16

  + Invoke-SwisVerb <<<<  $swis Orion.APM.Application Unmanage AA:516 2014-02-11T20:00:00Z 2014-02-11T21:00:00Z false

     + CategoryInfo          : InvalidArgument: (:) [Invoke-SwisVerb], ParameterBindingException

     + FullyQualifiedErrorId : PositionalParameterNotFound,SwisPowerShell.InvokeSwisVerb

I've tried different was to express the time, with and witthout the Z, with and without quotes, calling the invoke command and entering the fields one by one.

Any advice for me?

Thanks,

SW@REC

Dear Sir or Madam -

Would you please document the possible values that may appear in the  "Status"  field of the  "Orion.Nodes"  table ?

I know that value "1"  means "up"  and value  "2"  means  "down".   What other values may appear and what do they mean ?

Thank you.

James Troy

Hi,

Cross posting as didn't get a response in NPM area:

Custom SWQL resource

Thanks

Stuart

Hello all -

I've managed to successfully create nodes using v3, and add that node to NCM with v2.  One thing I am not seeing though is  how to set the credentials for NCM?

I used

XmlDocument xdoc = new System.Xml.XmlDocument();

XmlElement[] elem = new System.Xml.XmlElement[1];

XmlElement xel = xdoc.CreateElement("coreNodeId");

this._NodeID.ToString();

client.invoke("Cirrus.Nodes", "AddNodeToNCM", elem);

Is there part of the XML that would set the credentials?

Is it possible to update an alert Note (or for that matter, any custom alert fields) after the alert has been acknowledged? And if so, would I use the same three fields [to id the 'row'] one uses to acknowledge an alert, I mean, since there is no 'recordId' and all?

Thanks,

Scott

On page 3 of the UnderstandingOrionAdvancedAlerts document, it is stated that "The trigger condition timer is an option when defining a trigger. When a trigger condition is detected an entry is made in the /Orion database/ to define the state of the triggered condition."

Given that the /Orion database/ has MANY tables, it seems like knowing which table(s) said 'entry' is made in[to] would be a good thing. Can anyone tell me which table(s) the doc is talking about? (AlertStatus, AlertTriggered, ??)

On another note,

We are also curious about the lifecycle of an alert; e.g. If an alert is fired for a device, then the device resets itself, or otherwise negates the alert, what happens to that alert?

Thanks,

Scott

Trying to add a node to NCM using the SDK with C# .NET. Have the following code:

System.Xml.XmlDocument xdoc = new System.Xml.XmlDocument();
System.Xml.XmlElement[] elem = new System.Xml.XmlElement[1];
System.Xml.XmlElement xel = xdoc.CreateElement("coreNodeId");
xel.InnerText = nodeID.ToString();
elem[0] = xel;

client.Invoke("Cirrus.Nodes", "AddNodeToNCM", elem);

Following exception results: "Invoke failed, check fault information."

Where can I check this fault info? Seems like this should work from looking around the message board.

Also - Can I set the NCM Global Connection Profile using the SDK in a similar way?

In my copy of the SolarWinds\Orion SDK\Schema\3.0\Orion.AlertStatus.html document, the notes field is empty for all of the fields. Can anyone either point me to a different doc, or give me the descriptions for the fields/columns of the Orion.AlertStatus table?

(Just trying to make sure I'm handling alerts correctly.) 

..and to that end, do I need to be looking into the Orion.AlertTriggered table?

Our main goal is to be pulling alerts for loading into a ticketing system.

Thanks,

Scott Fraley