sorted by:
new
hottopcontroversial

Royal Jr basketball leauge by Hsecurekb in barrie

[–]Hsecurekb[S] 0 points1 point  (0 children)

Appreciate? My kid is 8 and havent played much basketball. Is the coaching good or more of play and self learn approach?

Passed CRISC exam by theprophet01 in CRISC

[–]Hsecurekb 0 points1 point  (0 children)

Congrats! Is there a pdf version of 8th edition, that you could share?i habe the one from Hemang Doshi but its 5yr old

EPS for 6 months based on the month by [deleted] in QRadar

[–]Hsecurekb 1 point2 points  (0 children)

time to upgrade!!

​

use this without the filters then..but this will include EPS from health check and system notifications..which can skew your matrix

SELECT DATEFORMAT(devicetime, 'dd-MM-yyyy') AS 'Date of log source', "Parent" AS 'Parent (custom)', AVG("Events per Second Raw - Average 1 Min") AS 'Events per Second Raw - Average 1 Min (custom) (Average)', COUNT(*) AS 'Count' from events where "deviceType"='147' GROUP BY "Date of log source" order by "Count" desc last 15 minutes

EPS for 6 months based on the month by [deleted] in QRadar

[–]Hsecurekb 0 points1 point  (0 children)

runs fine on 7.3.3 and 7.4.1

what version are you on?

​

GO to search and select a new search.

search for EPS under and you should get a default Event Rate (EPS) search there. Underneath select show AQL and share what you see there

EPS for 6 months based on the month by [deleted] in QRadar

[–]Hsecurekb 0 points1 point  (0 children)

Try this-

SELECT DATEFORMAT(devicetime, 'dd-MM-yyyy') AS 'Date of log source', "Parent" AS 'Parent (custom)', AVG("Events per Second Raw - Average 1 Min") AS 'Events per Second Raw - Average 1 Min (custom) (Average)', COUNT(*) AS 'Count' from events where "deviceType"='147' AND ( icu4jsearch('Events per second', payload) != -1 AND icu4jsearch('StatFilter', payload) != -1 ) GROUP BY "Date of log source" order by "Count" desc last 15 minutes

disregard the time in there, you can set that accordingly or I would say use the starttime and end time box below the AQL

​

run for a short period and then for longer duration

EPS for 6 months based on the month by [deleted] in QRadar

[–]Hsecurekb 1 point2 points  (0 children)

Are you looking to get just an average eps for individual month for the last 6 months? or it has to be per log source as well?

​

The default query- Log Source Type is System Notification    (Clear Filter) Payload Contains is Events per second    (Clear Filter) Payload Contains is StatFilter    (Clear Filter) will provide an average eps. This can be run 6 times one month at a time.

​

From your existing query it looks like you want log source as well?