Report showing Critical/Warning alerts in New resolution state 1 day old

Question

Hi,  Has anyone come up with a SQL query that will pull this information correctly - there are a few other posts I've read that mentioned the perculiarity that resolution state isnt updated on original alert and instead 'pairs' of alerts ar created
with one having the new state (0) and the associated one with the closed state(255).  I'm aware the active alerts are stored in OpsDB and then groomed to DataWarehouse, and its a bit of a minefield to know where to pull the various properties from - I've
seem some examples with very complicated joins between the various tables.
I am also wondering where the console gets the 'Age' property of an alert (In Monitoring Pane), is it held in one of the tables Which I can directly reference or is it a calulates field which the console displays/formats as days/hours.
A version of the script I'm hacking away with is as below - it gives me some of the detail but not sure how to get it to display the specific criteria needed (Critical/Warning in state New > 1 day old).  If anyone can supply a working script (for
SCOM 2012R2 it would be greatly received!!)
SELECT     a.AlertGuid, a.AlertName, a.AlertDescription, a.Severity, a.Category, active.ResolutionState, active.TimeInStateSeconds, active.StateSetDateTime,
                      Current_ResolutionState.StateSetByUserId, Current_ResolutionState.ResolutionState AS Current_ResolutionState, Current_ResolutionState.TimeFromRaisedSeconds,
                      Current_ResolutionState.StateSetDateTime AS Current_StateSetDateTime, a.RaisedDateTime, vManagedEntity_1.DisplayName, ad.CustomField3,
ad.CustomField2,
                      ad.CustomField6
FROM         Alert.vAlert AS a INNER JOIN
                      Alert.vAlertDetail AS ad ON ad.AlertGuid = a.AlertGuid INNER JOIN
                      Alert.vAlertResolutionState AS active ON active.AlertGuid = a.AlertGuid AND active.ResolutionState = 0 INNER JOIN
                      vManagedEntity ON a.ManagedEntityRowId = vManagedEntity.ManagedEntityRowId INNER JOIN
                      vManagedEntity AS vManagedEntity_1 ON a.ManagedEntityRowId = vManagedEntity_1.ManagedEntityRowId AND
                      vManagedEntity.ManagedEntityRowId = vManagedEntity_1.ManagedEntityRowId LEFT OUTER JOIN
                      Alert.vAlertResolutionState AS Current_ResolutionState ON Current_ResolutionState.AlertGuid = a.AlertGuid AND Current_ResolutionState.ResolutionState
<> 0
WHERE     (a.RaisedDateTime BETWEEN @StartDate AND @EndDate) AND (Current_ResolutionState.ResolutionState < 11) AND (a.Severity <> 0)
ORDER BY Current_ResolutionState

Answer 1

try the following
SELECT     a.AlertGuid, a.AlertName, a.AlertDescription, a.Severity, a.Category, active.ResolutionState, active.TimeInStateSeconds, active.StateSetDateTime,  Current_ResolutionState1.ResolutionState1 AS Current_ResolutionState,
Current_ResolutionState1.TimeinstateSeconds1, 
 Current_ResolutionState1.StateSetDateTime1 AS Current_StateSetDateTime, a.RaisedDateTime, vManagedEntity_1.DisplayName, ad.CustomField3, ad.CustomField2, ad.CustomField6
FROM         Alert.vAlert AS a INNER JOIN
                      Alert.vAlertDetail AS ad ON ad.AlertGuid = a.AlertGuid INNER JOIN
                      Alert.vAlertResolutionState AS active ON active.AlertGuid = a.AlertGuid AND active.ResolutionState = 0 INNER JOIN
                      vManagedEntity ON a.ManagedEntityRowId = vManagedEntity.ManagedEntityRowId INNER JOIN
                      vManagedEntity AS vManagedEntity_1 ON a.ManagedEntityRowId = vManagedEntity_1.ManagedEntityRowId AND
                      vManagedEntity.ManagedEntityRowId = vManagedEntity_1.ManagedEntityRowId LEFT OUTER JOIN
                      (select alertguid, max(resolutionstate) as resolutionstate1 , max(statesetdatetime) as statesetdatetime1,
                        max(timeinstateseconds) as timeinstateseconds1 from Alert.vAlertResolutionState group by alertguid)
                       AS Current_ResolutionState1 ON Current_ResolutionState1.AlertGuid = a.AlertGuid AND
                         Current_ResolutionState1.ResolutionState1 <> 0
WHERE     (a.RaisedDateTime BETWEEN @StartDate AND @EndDate) AND (Current_ResolutionState1.ResolutionState1 < 11) AND (a.Severity <> 0)
AND Current_ResolutionState1.timeinstateseconds1 >= 86400 ORDER BY Current_ResolutionState
Roger