We have implemented SA 10.2 with SAW
let me know table name for running query(saw) in expert mode in a rule.
like select * from table name
In envision we can run query on different table like access,firewall,antivirus etc….
Which table we need to use in SA? from where i can get table details.
i think you need to create the table first then you can select.
https://sadocs.emc.com/0_en-us/199_10.2_User_Guide/20_Analyst_Operator_Tasks/Process_Complex_Events_(CEP)/00_Define_CEP_…