We are currently reviewing the queries that can be configured for alerts in DXOE.
In the “Data” section of DXOE, we understand that multiple queries can be added.
There is an icon labeled “select as the condition Query” — does this mean that the query with this icon selected is the one referenced as the condition for the alert?
If so, is it possible to configure the alert so that all added queries are referenced, and the alert is triggered if even one of them meets the threshold specified in the “conditions” section?
Use multiple queries, optionally with variables, to take advantage of the full power of Wavefront Query Language (WQL).