In envision what would be SQL Query to fetch last four hours Report from current time using the table NIC System

[RajKumar]

Am trying to write a query and am success till the point I collect the total number of event Count(count) but unable to write a condition to fetch records written more that 250 times within a certain time frame (ie., from the current timestamp - 4 hours).... Unable to find the parameter for the same or the field to obtain the same.

[RSAAdmin]

As per my understanding and experience, enVision does not have this functionality. It does not give you the capability to perform arithmetic calculation beyond certain point which are defined by RSA i.e. Count(count), percentage(count) etc.

Even if you try to write your query (which we all can), but RSA restricted this in the SQL Statement box. If you write your query, it throws an error.

So at the end, it is not possible. But if you find the way, please POST it here.

Thanks.

[RSAAdmin]

Hello,

I have had a lot of success writing much more advanced SQL queries using Event Explorer.  You might consider creating a new Event Trace based on NIC_System events and adding an Advanced Table view, which will enable you to write the appropriate SQL.

Thanks,

Al

[RajKumar]

Hi,

Could you please provide me the query to fetch the same from Event Explorer and accordingly would try and see if the same works.