OnLoad filtering for Transaction Pattern Lable on syslog_transaction Table not working as expected
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-25-2025 11:16 AM
Dear colleagues,
I am working on a Dashboard using PA Automated and Formula indicators to display a number of metrics on syslog_transaction table. Though I was able to create few reports with no issues, I am struggling with the following:
I need to capture metrics for onLoad transactions, and I have discovered the Transaction Pattern Field could help me get that. On a LIST view, I could easily retrieve transactions by setting the Transaction Pattern.Lablel field into CONTAINS ONLOAD. However, when applying the same filter on the Automated Indicator I have created seems not to be working. I tried re-running the collection Jobs several times [also deleting scores] but that won't do the trick.
I am using as a source the syslog_transaction table and filtering out those records matching the tables of my interest. I like to keep the Source this way so that I can re-utilize across all my indicators. So when it comes to narrowing data I use the ADDITIONAL CONDITIONS tab within the Automated Indicator so here's where I am attempting to apply the filter describe on the above. I don't see why this could be an issue, just sharing with you how I have structured the Source and the filtering criteria at the indicator level.
If anyone could help me figure this out I will be extremely thankful.
Have a nice day,
CSA - CIS PA