I seein this caseonlythe following option: play aroundwith time.
Scriptlooksrecordover the past fiveminutes.
Type of Property to Monitor: Custom SQL Alert
Set up yuor Trigger Query: Auditing Events
lastpart of the script:
WHERE
AuditingActionTypes.ActionTypeID in (24,25,26,27,29)
AND (DATEDIFF(minute, AuditingEvents.TimeLoggedUtc, GETUTCDATE()) < 5)
Image may be NSFW.
Clik here to view.
| ActionTypeID | ActionType | ActionTypeDisplayName |
| 24 | Orion.NodeAdded | Node added |
| 25 | Orion.NodeDeleted | Node deleted |
| 26 | Orion.NodeManaged | Node managed |
| 27 | Orion.NodeUnmanaged | Node unmanaged |
| 28 | Orion.NodePollingEngineMoved | Node polling engine changed |
| 29 | Orion.NodeChanged | Node edited |
