Hello Team,
I am looking for a DQL where I need to see the list of agent services (Ex : SCCM, Dynatrace, Trellix etc) for specific tagging ex : ABC, can you please let me know how to get it, I have DQL for MZ but I tried to modify it for Tagging but its not working, please can you help me.
DQL for MZ :
timeseries avg(dt.osservice.availability), by:{dt.entity.host, dt.osservice.status, dt.osservice.startup_type, dt.osservice.name}
| lookup [
fetch dt.entity.host
| fields tags, id, entity.name
| expand tags
| filter contains(toString(tags), "MSO") or contains(toString(tags), "My Server Groups") or contains(toString(tags), "Test")
], sourceField:dt.entity.host, lookupField:id
| filter startsWith(dt.osservice.name, "Dynatrace" ) or startsWith(dt.osservice.name, "lmn" ) or startsWith(dt.osservice.name, "efg" ) //or startswith(dt.osservice.name, "abc") or startswith(dt.osservice.name, "xyz") or startswith(dt.osservice.name, "SQL")
| fields Status = if(dt.osservice.status == "running","🟢", else:"🔴") , dt.osservice.name, dt.entity.host, dt.osservice.status, dt.osservice.startup_type
