We have implemented SA 10.2 with SAW
let me know table name for running query(saw) in expert mode in a rule.
like select * from table name
In envision we can run query on different table like access,firewall,antivirus etc….
Which table we need to use in SA? from where i can get table details.
In non expert mode SAW report - reporting engine creates temporary tables which are deleted after the report is finished.
So there are no default tables in SAW as envision does.
For expert mode, it requires to create external tables using hive. refer hive documentation for syntax
LanguageManual DDL - Apache Hive - Apache Software Foundation
Once you create external tables, "show tables" command will list down all the external tables created in SAW.
You can run this command in hive console in 10.2.
Regards
Ankush
on May 10, 2014
i think you need to create the table first then you can select.
https://sadocs.emc.com/0_en-us/199_10.2_User_Guide/20_Analyst_Operator_Tasks/Process_Complex_Events_(CEP)/00_Define_CEP_…