CA Database Schema - SQL Querying
Hi there - I am currently looking to build some custom SQLqueriesagainst the CA database but am struggling to understand the various tables and their relationships. Is anyone aware of where I can find a data relationship diagram, CA data model schema, or data dictionary to assist? As a temporary option, I am looking at the IntDiscoveredItems table which I understand are similar to the alerts produced when certain hotwords are hit. However I am unsure how to link this table back to the IntHotwordID table? Any help is much appreciated.1.6KViews0likes2Comments
DQL Query to find a specific filename
How do I look for a specific file? Ie what’s the field for “filename” ? Using DQL report, I can find all files with extension “url” What do I change to find a specific file (HELP_DECRYPT.URL) FROM path GET absname, size AS size_bytes, formatdate(created_on,'YYYY/MM/DD HH:MM:SS Z') AS creation_time, formatdate(last_accessed,'YYYY/MM/DD HH:MM:SS Z') AS last_accessed_time, formatdate(last_modified,'YYYY/MM/DD HH:MM:SS Z') AS last_modified_time IF type = "FILE" AND extension IN ("url") SORTBY size DESC1.8KViews0likes1Comment
CA Unable to modify a search thats setup
We are running CA 10.0.4 and have searches setup on a daily schedule to collect the emails against the hotword for the compliance team to review. They have started providing email addresses to block, so i can see we need to do this under the freeform email addresses area. I created a new search to test this, which is fine and works - but I am unable to go back into the search and modify the email exclusions to include any new ones that they add.. I have created a new role that has all the permissions selected and it still doesnt allow me to modify the search. Is this a restriction of the product or is there a way to do this and to also remove old searches under the search screen in Departments? Any assistance gratefully recieved!Solved1.1KViews0likes3Comments
Search terms with and without dashes.
I was led to believe that whilst constraining a search term by double quotation marks in order search for that exact term dashes are ignored. Thus, for example, "212-M50-0599" is equivalent to“212 M50 0599”. However what we are finding, in the case of this example, we are gettting matches to the area code 212 rather than that exact string. Is there something that I'm missing? I'm not sure the dashes even have anything to do with it as this is a string of ten numbers broken up in the right places. Any guidance would be appreciated.Solved626Views0likes5Comments
How to write rule? to deduplicate prior to exporting.
Can someone send a screen shot of how and what a rule for deduplication on a case would look like.We wantto deduplicate our records prior to examination and export. We have several vault stores/juornals in our environment.Solved891Views4likes2Comments
DA Search
Hi All, Just upgraded to EV/DA 9.0.2 from EV/DA 2007 SP6. My question is on a search TO/FROM recipient(s) in DA, does specifying just the SMTP address capture both internal and external mail or do you also have to also specify the user(s) full name in quotes? We are doing some testing and getting inconsistent results. Does indexing not capture the SMTP address on internal mail? Does envelope journaling make a difference, it is turned on. Thanks.Solved598Views0likes2Comments
DQL Query to find a specific filename
How do I look for a specific file? Ie what’s the field for “filename” ? Using DQL report, I can find all files with extension “url” What do I change to find a specific file (HELP_DECRYPT.URL) FROM path GET absname, size AS size_bytes, formatdate(created_on,'YYYY/MM/DD HH:MM:SS Z') AS creation_time, formatdate(last_accessed,'YYYY/MM/DD HH:MM:SS Z') AS last_accessed_time, formatdate(last_modified,'YYYY/MM/DD HH:MM:SS Z') AS last_modified_time IF type = "FILE" AND extension IN ("url") SORTBY size DESC