Hello all,
I am trying some SWQL queries towards the the Orion.Netflow.FlowsByConversation entity, so I am guessing that it is querying the Flow Storage Database.
Can anyone confirm that it is case-sensitive?
For example, the queries below return different result set
SELECT TOP 100 f.SourceHostname as Source, f.DestinationHostname, SUM(f.Bytes/1024/1024) as TotalMBytes
FROM Orion.Netflow.FlowsByConversation f
WHERE
SourceHostname LIKE '%SBS%'
OR DestinationHostname LIKE '%SBS%'
GROUP BY f.SourceHostname, f.DestinationHostname
ORDER BY SUM(f.Bytes) DESC
SELECT TOP 100 f.SourceHostname as Source, f.DestinationHostname, SUM(f.Bytes/1024/1024) as TotalMBytes
FROM Orion.Netflow.FlowsByConversation f
WHERE
SourceHostname LIKE '%sbs%'
OR DestinationHostname LIKE '%sbs%'
GROUP BY f.SourceHostname, f.DestinationHostname
ORDER BY SUM(f.Bytes) DESC