Hi,
I am interested in using my own custom connector with Direct Discovery.
In order to test it out I am trying to use the QvEventLogConnectorElaborate custom connector of the SDK 2.0.
The example given in the QvEventLogConnectorElaborate.qvw is a simple SELECT of all the fields provided by the connector to load them at LOAD time:
CUSTOM CONNECT TO "Provider=QvEventLogConnectorElaborate.exe;Server=localhost;...";
SQL SELECT Category,
CategoryNumber,
EntryType,
Index,
MachineName,
Message,
Source,
TimeGenerated
FROM ApplicationsEventLog;
When I try to use it with Direct Discovery here is what I do:
CUSTOM CONNECT TO "Provider=QvEventLogConnectorElaborate.exe;Server=localhost;...";
DIRECT SELECT Category,
CategoryNumber,
EntryType,
Index,
MachineName,
Message,
Source,
TimeGenerated
FROM ApplicationsEventLog;
The previous Direct query gives me a QVX_SYNTAX_ERROR error message from the QvxLibrary:
QVX_SYNTAX_ERROR: Invalid query: SELECT CategoryID FROM ApplicationsEventLog GROUP BY CategoryID
DIRECT SELECT CategoryID
FROM ApplicationsEventLog
Would anyone know what is the reason why I am getting this error message and if I could (if possible) use a customer connector with Direct Discovery?
Am I missing something with implicit fields?
Thanks,
