Skip to main content
kcanalichio
New Member
December 22, 2022
Question

Creating a report that uses contstants.

  • December 22, 2022
  • 2 replies
  • 1656 views

What is the correct syntax to  Include the following formula in a report

 

86400-SUM(System Downtime)

2 replies

kcanalichio
New Member
December 22, 2022

In a report I want to have a return a field that uses a constant of 86400 and subtract the amount of system downtime. The Ultimate goal here is to have a column that shows total uptime over the last 24 hours(or period the the report is run for). Since Uptime in the PH_DEV_MON_SYSTEM_UPTIME is uptime since the machine was rebooted.

In most reporting software it would look something like this

86400-SUM(System Downtime)

This syntax is not allowed in the fortisiem, so what is the correct syntax?

I'm using the report 'Top Devices by Accumulated System Downtime' as the base for adding this new column

kcanalichio
New Member
December 22, 2022

was able to get what I needed by doing this

(86400 + SUM(System Downtime) - SUM(System Downtime) ) - SUM(System Downtime))

why this works and why

(86400 - SUM(System Downtime) )

doesn't  is something a developer will need to look at

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT