Investigate Time Before Selected Time

Thu, 29 Nov 2012 22:35:28 GMT

Greetings All,

I've been out of the QlikView world for quite some time, and haven't kept up my skill as well as I'd have liked (in retrospect, heh). I'm struggling to solve a problem that I'm sure I've solved before using set analysis with advanced search expressions. Memory of syntax isn't serving as well as memory of event, however.

So, here's the basic problem. I have very verbose log files that I'm analyzing. There's an event that occurs regularly that I'm trying to investigate. The event itself is not as interesting as the set of events that occur directly preceeding it. How do I select the preceeding events (say 5 minutes preceeding, or 100 events preceeding) given the events themselves?

Below is my basic data schema, by way of Load+Select statement:

LOAD EventLog,
    RecordNumber,
    TimeGenerated,
    TimeWritten,
    EventID,
    EventType,
    EventTypeName,
    EventCategory,
    EventCategoryName,
    SourceName,
    Strings,
    ComputerName,
    SID,
    Message,
    Data;
SQL SELECT *
FROM BrokenAnalysis.dbo.localSysLog;
//-------- End Multiple Select Statements ------
TimeLink:
LOAD TimeGenerated
  ,MakeDate(Year([TimeGenerated]),Month([TimeGenerated]),Day([TimeGenerated]))
  +MakeTime(Hour([TimeGenerated]),Minute([TimeGenerated])) As TSLink
RESIDENT EventLog;

Re: Investigate Time Before Selected Time

Sat, 01 Dec 2012 18:58:41 GMT

check peek() function in load script

or send sample file with object (chart?) you are talking about

topic Investigate Time Before Selected Time in QlikView

Investigate Time Before Selected Time

Re: Investigate Time Before Selected Time