Looking for DQL to discover maintenance window settings

[rseibert1]

Not seeing an ability to query DQL for the maintenance windows that are currently active, besides which entities the window effects. We currently have a workflow that creates new windows but does not activate them (user triggered) so observability team can verify the window looks good and then just through the slider to Active. The trouble with that is I see no way to query to verify this action had taken place. 

[p_devulapalli · Accepted solution]

@rseibert1 Can you try the below DQL ?

Take a look at the "details.json_before" and "details.json_after" fields . These would have the info you are after

Hope this helps 

fetch dt.system.events
| filter event.kind == "AUDIT_EVENT"
  and event.provider == "SETTINGS"
  and matchesPhrase(details.dt.settings.schema_id, "builtin:alerting.maintenance-window")

[rseibert1]

Thanks for this insight, I knew there had to be a way!