Skip to content

Commit 3ebddb8

Browse files
authored
Update to include Rules - Thank you Alex K!
1 parent 5ff67a5 commit 3ebddb8

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed
Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
SELECT top 20 LoggingComputer as ComputerName, COUNT(*) AS TotalEvents, Number as EventID
2-
FROM EventallView with (NOLOCK)
3-
GROUP BY LoggingComputer, Number
4-
ORDER BY TotalEvents DESC
1+
SELECT top 20 LoggingComputer as ComputerName, COUNT(*) AS TotalEvents, Number as EventID, Name as RuleName, DisplayName as RuleDisplayName
2+
FROM EventallView eav with (NOLOCK)
3+
LEFT JOIN RuleView rv with (NOLOCK) on rv.Id = eav.RuleId
4+
GROUP BY LoggingComputer, Number, Name, DisplayName
5+
ORDER BY TotalEvents DESC

0 commit comments

Comments
 (0)