We have added CA Siteminder r12 into our log collection and via Analysis Event Viewer/Message view, I am able to see the logs in enVision.
However I am having trouble figuring out if its properly parsing them and how to create a simple report such as all authenticated users in past hour.
When I go to Analysis/Query & create a new query I dont know what table to query thus dont know how to get started?
Any pointers or examples of existing Siteminder reports would be most welcome,
Thanks in advance