Quantcast
Channel: THWACK: Message List
Viewing all articles
Browse latest Browse all 20693

Re: How do you ignore port 0 on SWQL query in custom table?

$
0
0

Hi,

 

Please try this query and let us know.

 

SELECT TOP 10 F.Application.Name, F.Port, AVG(F.TotalPackets) as Average, MAX(F.TotalPackets) as Peak

FROM Orion.NetFlow.flows F

WHERE F.IngressInterface.InterfaceID in (295, 294) AND minutediff(F.ObservationTimestamp, GetDate()) < 15 AND F.PORT <> 0

GROUP BY F.Application.Name, F.Port

ORDER BY Average DESC


Viewing all articles
Browse latest Browse all 20693

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>