Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements
QlikView Fans! We’d love to hear from you.
Share your QlikView feedback with the product team… Click here to participate in our 5-minute survey.
Rules, plus terms and conditions, can be found here.
datanibbler
Esteemed Contributor

My own "Governance app" based on the GD - field meanings?

Hi,

I am working on a customized (and very much smaller) Version of the Governance_Dashboard to Monitor the ongoings on our QlikView_Server - I just want a fraction of the Information contained in the original, some of the Information is not even available because the logging_functions are very low_Level in our Server_installation.

I have a question on the meaning of a field, I Need to understand before using it in my own app:

I am only using the two tables "SessionTaskAuditMaster" and "Performance".

=> In the table "STAM", there is a "SessionTimeStamp" and a "SessionHour" - but they do not correspond to each other, so I wonder what is what here?

That is not in the public documentation of the GD, or I haven't found it yet, I will Keep looking, maybe the info is somewhere already ...

Still, can someone help me with that?

Thanks a lot!

Best regards,

DataNibbler

8 Replies
Employee
Employee

Re: My own "Governance app" based on the GD - field meanings?

Hi Friedrich -

hour([Session Start]) as SessionHour,

$(Timestamp_field) as SessionTimestamp,

where Timestamp_field = 'Timestamp( $(ts_modifier) ([Timestamp]))'

So both fields come from the Session log file with Session Start being the start time of a session and Timestamp being the log entry timestamp which is equivalent to the session end. So Session Start + Session_Duration = Timestamp.

I'm curious how you are seeing that they do not correspond. Perhaps share a few examples? (Include Session Start, Timestamp, Session_Duration from the STAM table.)

Does this help?

datanibbler
Esteemed Contributor

Re: My own "Governance app" based on the GD - field meanings?

Hi Tyler,

thanks for the quick answer!

I haven't tried out how it fits together with >>SessionStart<< - I didn't know yet that the Timestamp is the end of a session ... I will put something together - or maybe the pieces will fall into place now, I'll see ...

P.S.: Well, like I thought - now that you told me, I know what is what and now it fits together - previously, I was comparing SessionHour with the Timestamp - there are no comments in the script. I will put in some.

datanibbler
Esteemed Contributor

Re: My own "Governance app" based on the GD - field meanings?

Hi Tyler,

only to be sure - the fields >>SessionStart<< and >> SessionDate<< are redundant (the DATE_part), aren't they?

Thanks a lot!

Best regards,

DataNibbler

Employee
Employee

Re: My own "Governance app" based on the GD - field meanings?

Yep. SessionDate is derived from [Session Start].

Concatenate (Sessions)

Load

RecNo() as SessionsEntry,

'$(fname)' as SessionsFileName, // For incremental loading of Sessions

'$(fname)' & RecNo() as _SessionId, // For incremental loading of sessionheatmap

makedate(year([Session Start]),month([Session Start]),day([Session Start])) as SessionDate,

num(makedate(year([Session Start]),month([Session Start]),day([Session Start]))) as SessionDateNum,

1 as Session_Start_Count,

hour([Session Start]) as SessionHour,

[Cal Type] as Cal_Type,

if(len([Authenticated user])>0,lower([Authenticated user]),'Anonymous') as Authenticated_User,

Selections as SessionSelections,

Calls as SessionCalls,

[Bytes Sent] as Bytes_Sent,

[Bytes Received] as Bytes_Received,

[CPU spent (s)] as CPU_spent__s_,

[Session Duration] as Session_Duration,

$(SessionStart_field) as Session_Start,

$(Timestamp_field) as SessionTimestamp,

[Exe Version] as SessionExeVersion,

[Exe Type] as SessionExeType,

lower(replace(Document,'/','\')) as Sessions_FileName,

LOWER(SubField(replace(Document,'/','\'),'\',-1)) as DocName,

SubField(replace(Document,'/','\'),'\',-1) as DocName_Sessions,

$(DocumentTimestamp_field) as Document_Timestamp,

[Exit Reason] as Exit_Reason,

([Exit Reason]='Server shutting down')*-1 as [Session Lost to Server Restart],

[Client machine identification] as Client_machine_identification,

[Serial number] as Serial_number,

[Client Type] as Client_Type,

[Secure Protocol] as Secure_Protocol,

[Tunnel Protocol] as Tunnel_Protocol,

[Server Port] as Server_Port,

[Client Address] as Client_Address,

[Client Port] as Client_Port,

'$(tmp_node)'&'|' & round(num($(Timestamp_field)),0.001) as Node_TS

FROM '$(fname)' (txt, utf8, embedded labels, delimiter is '\t', msq)

WHERE NOT EXISTS(_SessionId,'$(fname)' & RecNo());

datanibbler
Esteemed Contributor

Re: My own "Governance app" based on the GD - field meanings?

Thanks again!

Now I realized I have deleted the date of the >>Session_Timestamp<< because I thought it was not relevant. Well, I can calculate that again by way of the >>Session_Duration<< - what unit is that in? Milliseconds?

datanibbler
Esteemed Contributor

Re: My own "Governance app" based on the GD - field meanings?

Seems to be seconds - right?

Employee
Employee

Re: My own "Governance app" based on the GD - field meanings?

datanibbler
Esteemed Contributor

Re: My own "Governance app" based on the GD - field meanings?

Hi Tyler,

many thanks! That is really going to prove very helpful going Forward.

Community Browser