Hi Christopher,
Wilson opened a ticket with us in Support earlier this week asking for sample queries for Splunk to report on when warning times have been reached or exceeded, but we don't have anything to provide in this regard other than our general Splunk Integration documentation and a couple of Knowledge Base resources. I directed Wilson to the Community here to see if other customers may have something they're using with Splunk similar to this purpose. Good call-out of the Pending Session Starter on the DX, though -- I agree that modifying the query to report on resource statuses and identifying non-present resources may be a good alternative here.
Wilson -- as Warning statuses are not located in the database, rather they are calculated in the code itself based on the values in the BPASession table (lastupdated time + warningthreshold time is earlier than (<) the current time = "Warning"), reporting on this status using SQL/other queries may prove difficult. However, perhaps other BP users who have Splunk/Data Gateways integration set up could share some further guidance in this thread on how they may accomplish what you're looking to do here.
------------------------------
Steve Boggs
Senior Product Support Engineer
Blue Prism
Austin, TX
------------------------------
