Filter events in adhoc reports

[RSAAdmin]

Hi,

Anybody know of a way to filter out events with low number of occurrences in the adhoc reports? What I want to do is a SQL clause of "AND COUNT(USERNAME) > 10". In the report I have chosen count(username) as one of the selectfields from the table, but I do not want the occurrences in the report where the count is less than 11.

[RSAAdmin]

Hello Pasi,

Unfortunately, you can currently only run where clause queries against actual fields - not against functions on those fields.

On the surface this looks like this should be a simple thing to do, but the reality is that the way the SQL querying syntax works is somwhat more complex, and it requires going outside the bounds of just the Where Clause.  Since all the report wizard has you doing is editing the Where Clause itself, I doubt you can hit your ultimate goal here.

I'll look into it a little further, but I don't suggest holding your breath...

Message Edited by MattMarchand on06-25-200812:29 PM