DQL report to show sensitive files/user activities for a given path
As you can tell, I'm brand new to the world of DQL and looking for help. My Data Insight 6.1 instance is integrated with Symantec DLP and gets the list of sensitive files from DLP. I created the dql below to report on ALL sensitive files in my environment, and it works good: FROM path GET absname, device.name, permissions.readable_permission IF issensitive = 1 FORMAT permissions as CSV AND device as CSV What I'm trying to do is get a list of sensitive files for a particular Windows file directory, not just everything, as well as output to CSV all user activites for those files within a given time period. Is that something that can be done within DQL? Thanks for your help with this one.
Cannot delete old portal entries that are in a submitted state
Hi All, Workflows has been submitted very long back, Cancelling or deleting the portal is not working. As referenced in Data Insight 5.2.x Release Notes, Workaround : You can cancel the workflow when it eventually transitions to the In-progress state. Note that the workflows with a large number of paths, may take a long time to transition from the Submitted state to the In-progress state. We are unable to cancel the Workflow, above workaround didn't work for us. Is there any Hotfix/ Patch available to resolve this issue ? Thanks in advance.
DQL SDK document
I'm working on Veritas Data Insight Version 5.1.1.8050 The help file states: “For more information about creating DQL queries, see the Veritas Data Insight SDK Programmer's Guide.” The most up-to-date copy of this document that I can find (via google) is a Symantec branded document version 4.0 dated June 2013. Is there a more up to date one? Specifically I’m interested in whether I can extract the file group (not just the extension) from queries on path. At the moment I’m extracting the extension and converting to file group in excel, but there must be a better way. The SDK document I have (2013) has a section on DQL Objects/Tables, but it doesn't reference file groups. I'm wondering if the set of available objects/tables has changed since the date of the doc.
Meta Read events in Data Insight
Hello Data Insight Experts, I did some searches already, and while I have found good information, I have yet to see a detailed explanation of the different file interactions that will trigger each type of Meta Access event (Report > Access Detail > Meta Access:Read Write Create Delete Rename Security ) I'm writing because I'm having a bit of trouble understanding what file interactions trigger each of the differen types of Meta Access types. As an example, when I search for a file, (e.g., *.log using the windows explorer after navigating to a NetApp filer), all the files that show up in the search list are listed as a READ in the report I run. If I navigate to a folder and open it, a READ event is registered against every file in that folder. Another quirk is that when I run a search for all 'Meta Access: SECURITY' events, I get back a number of 'Meta Access: WRITE' events. Is there a place where each Meta Access type is discussed in detail? I've seen it described at a high level in a number of places, but need something more granular.Call Detail Record (CDR)
Hi there, has anyone of you had some experience with CDR's. CDR's are Telco style data sets, which describe calls placed by a customer. A call detail record contains metadata – containing data fields that describe a specific instance of a telecommunication transaction, but does not include the content of that transaction, according to Wikipedia. Depending (on the no of fields captured) on the telco's definition, these files could be smaller or bigger. They are mostly zipped. I am yet to understand a bit more about it, but the questions is can Di be used to reduce the amount of primiary storage consumed here. Any comments/pointers will be appreciated. Thanks