Starting XMA 2.70, SEND_STATUS should be used instead since ALERTEDGMT is not the important indication of whether messages were sent to the SIEM successfully.
For example, the below query returns the number of records sent to the SIEM, sorted by Target IP/Port and send_status.
set varchar_width 10;
select cast(entryGMT as date), target_host, target_port, send_status, count(*) from p65pdat.syslogq
where part = 0
group by 1, 2, 3, 4
order by 1, 2, 3, 4
browse access;
If this article did not provide a solution, please open a case with our support team by sending an email message to support@xypro.com.