RSA Admin

Variables in Report Query

Discussion created by RSA Admin Employee on Nov 5, 2008
Latest reply on Oct 28, 2009 by RSA Admin

I am trying to use a varible in a report query but running inot a problem with the LIKE portion.  Query is shown below.  What I need is to have the like include a % before and after the variable. ${uname} so it seaches for any name containg the entry.  I want to find if the user name including a domain such as xyz\aaabbbccc or aaabbbcccKSG by entering "aaabbbccc" for the variable. 

 

(DeviceAddress in (select paddr from device_list where dtype in (14,15,20,30))) AND

EventCategory = '1401030000'  AND UserName LIKE (${uname})

 

Can someone tell me how to change the query to get the results I am loogin for or is this a limit of using variables?

Outcomes