This article describes a way to get SWQL queries to help create a report or an alert on a custom poller.
NPM 11.5 and later
You will need to generate queries in SWIS to apply them in the alert and reports. To do so, go to
http://<SERVER NAME>/Orion/Admin/swis.aspx. Replace <SERVER NAME> with the correct IP or hostname for your environment. The screenshot below shows the page for the Orion SWIS Query and will have a drop down to select what is available. You can then select this and click Generate Select Query to see how these are created and then you can modify according to your needs.