Hi,
I am looking to retrieve the top 10 alerting nodes (i.e. node 1 had 10 alerts, node 2 had 9 alerts etc.) via the API/SWQL
Could anyone assist on how I would go about this?
I have been looking at the Orion.AlertStatus table in conjunction with the Orion.AlertObjects table but I'm not convinced the data I'm getting back is correct for my requirements.
Regards,
Andrew