Newbie to envision correlation rules.
Was wondering if there was a way to find out which correlation rules are not used in any of the views through SQL query.
Only the rules which are configured are associated with view in sybase NIC db and can be found via sql query on Alertview and selected_Alerts table. Since all the rules are stored as xml files on the disk and hence it is not possible to simple query out the rules which are not associated with view.
One way to do is to create a table (lets say temp with column rulename) in Sybase and load it with all the rule names from present in disk (without the ".xml" extension) and then run a query like
select * from temp where rulename not in (select message_id from selected_alerts)
This will give all the rules which are not associated with a view but are configured and are present in enVision.
Retrieving data ...