Absent Member.
Absent Member.
236 views

Help needed with Flex Connector

Dear All,

I have been facing an issue with one of my flex connectors for a long time now. I have tried everything possible but nothing seems to be working.

The issue is:

The data in the DB from which I have been collecting logs does not have a unique ID. The time also has only seconds (not milli-seconds) as a result, my connector is not picking up events randomly. I, with the help of my DB guy, created a workaround where he creates a unique ID for the logs combining it with time. But, every set of log fetch is assigned unique numbers in different series. It is not sequential.

Query:

query= select convert(varchar(60),LOG_DATE,109)+TRAN_ID AS ROW_ID,a.TRAN_ID,a.USER_ID,a.AGENT_ID,a.AGENT_TYPE,a.DESCRIPTION,a.LOG_DATE,a.TRAN_TYPE,a.BUSINESS_ID,a.AMOUNT,a.CURRENCY_CODE,a.SRVR_TID,a.USER_ID_INT,a.AGENT_ID_INT,a.STATE,a.MODULE,a.FROM_ACCT_ID,a.FROM_ACCT_RTGNUM,a.TO_ACCT_ID,a.TO_ACCT_RTGNUM,b.user_name, b.first_name,b.last_name,b.MOBILE1,b.MOBILE2,b.ADIB_UK_RIM from AUDIT_LOG a,customer b where (a.USER_ID_INT *= b.directory_id) AND a.LOG_DATE >= ?

timestamp.field=LOG_DATE

uniqueid.fields=ROW_ID

If anyone can help me out here, I would be much obliged. I can send log files also if anyone can help me out.

Thanks and Regards,

Srivatsa G.V.

Labels (2)
0 Likes
2 Replies
Vice Admiral
Vice Admiral

Hello

May you post a database fields screenshot and sdktbdatabase.properties file?

I suppose this problem can be solved using more uniqueid.fields or using intermediate database with software to add id to database(not so good but it works).

Regards,

Alexander

0 Likes
Absent Member.
Absent Member.

Hi Alexander,

I will send you the fields screenshot in sometime. The below attached is the sdktdatabase.properties file:

version.order=1

version.id=9.0

 

query = select convert(varchar(60),LOG_DATE,109)+TRAN_ID AS ROW_ID,a.TRAN_ID,a.USER_ID,a.AGENT_ID,a.AGENT_TYPE,a.DESCRIPTION,a.LOG_DATE,a.TRAN_TYPE,a.BUSINESS_ID,a.AMOUNT,a.CURRENCY_CODE,a.SRVR_TID,a.USER_ID_INT,a.AGENT_ID_INT,a.STATE,a.MODULE,a.FROM_ACCT_ID,a.FROM_ACCT_RTGNUM,a.TO_ACCT_ID,a.TO_ACCT_RTGNUM,b.user_name,b.first_name,b.last_name,b.MOBILE1,b.MOBILE2,b.ADIB_UK_RIM,b.directory_id from AUDIT_LOG a,customer b where (a.USER_ID_INT = b.directory_id) AND LOG_DATE >= ?

timestamp.field=LOG_DATE

uniqueid.fields=ROW_ID

#query.limit=50

#Assign

event.name=DESCRIPTION

event.deviceReceiptTime=LOG_DATE

event.deviceCustomString1Label=__stringConstant("TRAN_ID")

event.deviceCustomString1=TRAN_ID

event.sourceUserId=USER_ID

event.sourceUserName=user_name

event.deviceCustomNumber1Label=__stringConstant("mobile_number")

event.deviceCustomNumber1=MOBILE1

event.deviceCustomNumber2Label=__stringConstant("AMOUNT")

event.deviceCustomNumber2=AMOUNT

event.deviceCustomString2Label=__stringConstant("CURRENCY_CODE")

event.deviceCustomString2=CURRENCY_CODE

event.deviceCustomString3Label=__stringConstant("SRVR_TID")

event.deviceCustomString3=SRVR_TID

event.deviceCustomNumber3Label=__stringConstant("USER_ID_INT")

event.deviceCustomNumber3=USER_ID_INT

event.deviceCustomString4Label=__stringConstant("STATE")

event.deviceCustomString4=STATE

event.flexNumber1Label=__stringConstant("MODULE")

event.flexNumber1=MODULE

event.flexNumber2Label=__stringConstant("TRAN_TYPE")

event.flexNumber2=TRAN_TYPE

event.fileName=ADIB_UK_RIM

event.deviceCustomString5Label=__stringConstant("FROM_ACCT_ID")

event.deviceCustomString5=FROM_ACCT_ID

event.deviceCustomString6Label=__stringConstant("TO_ACCT_ID")

event.deviceCustomString6=TO_ACCT_ID

event.flexString1Label=__stringConstant("FROM_ACCT_RTGNUM")

event.flexString1=FROM_ACCT_RTGNUM

event.flexString2Label=__stringConstant("TO_ACCT_RTGNUM")

event.flexString2=TO_ACCT_RTGNUM

event.message=__concatenate(first_name," - ",last_name)

 

#submesage.messageid.token=TRAN_TYPE

#submessage.token=DESCRIPTION

#submessage.count=2

#submessage[0].messageid=7000

#submessage[0].pattern.count=1

#submessage[0].pattern[0].regex=\\S+\\s+(\\d+\\.\\d+\\.\\d+\\.\\d+).*

#submessage[0].pattern[0].fields=event.sourceAddress

 

#submessage[1].messageid=7007

#submessage[1].pattern.count=1

#submessage[1].pattern[0].regex=\\S+\\s+(\\d+\\.\\d+\\.\\d+\\.\\d+).*

#submessage[1].pattern[0].fields=event.sourceAddress

event.sourceAddress=__regexTokenAsAddress(DESCRIPTION,"\\S+\\s+(\\d+\\.\\d+\\.\\d+\\.\\d+).*")

event.deviceVendor=__stringConstant(Internet-Banking)

event.deviceProduct=__stringConstant(IB-AUDIT-LOGS)

Thanks and Regards,

Srivatsa G.V.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.