Content Comparison

...

Before we get into running and building a report, we will take a look at a query. For this tutorial, we will take apart a fairly complex query that uses some dynamic SQL to do some neat stuff. Lets get started.

• This tutorial is based on a query with 2 parameters, and 1 report. You can go through these in ArcSight to see how they work.
  • Query: XD - Top Sources of Login Events DYNAMIC
    • Parameter 1: campusWhereSnippet
    • Parameter 2: authResult
  • Report: XD - Top Sources of All Login Attempts

Queries

(Note: This assumes you have a basic knowledge of SQL. If you don't I highly recommend w3schools. Especially their "try it" functionality.)

...