Differences

This shows you the differences between two versions of the page.

Link to this comparison view

fortianalyzer_sql_syntax [2018/07/31 13:40]
mnantel created
fortianalyzer_sql_syntax [2018/07/31 14:18] (current)
mnantel
Line 6: Line 6:
 Show the username from auth/FSSO, or the username learnt from telemetry, or fallback to source IP address: Show the username from auth/FSSO, or the username learnt from telemetry, or fallback to source IP address:
 <​code>​ <​code>​
-coalesce +COALESCE(nullifna(`user`),​nullifna(`unauthuser`),​ipstr(`srcip`)) 
-( +AS
-nullifna +
-(`user`), +
-nullifna +
-(`unauthuser`),​ +
-ipstr +
-(`srcip`) +
-+
-as+
 user_src user_src
 </​code>​ </​code>​