Event and Report extract rules
Use the payment business events to identify Transactions which have ACCP clearing status (NPP 1012.NPP 1013) with missing Settlement Notification event NPP 1040
"NPP 1033_CR_INBOUND "NPP 1012 CECARING_INBOUND"
• "NPP 1013_RETURN_INBOUND" I
"NPP 1040 SETTLEMENT RECEIVED" Report should include the following fields
Time from NPP 1033
TXID from NPP 1033 Amount from NPP 1012 or NPP 1013
Already i have created query
index-nch_apps_nonprod applications fis-npp source fis-npp-sit4 ((NPP 1012 CLEARING INBOUND OR NPP 1013 RETURN INBOUND) OR NPP 1033 CR INBOUND or
rex field-message "eventName=\"(?<eventName> *?)\"."
rex field-message "txId\"(?<txId>. *?)\,"
Κ
I rex field-message "amt=\"(?<amt>.2)\"." rex field-message ibm.datetime-(?<ibm_datetime> *),"
+
Participant
1 eval Participant substr(txId,1,8)
stats values(eventName) as eventName, min(ibt datetime) as Time, values(amt) as amt by (eventName, NPP 1840 SETTLEMENT RECEIVED) < 0 table Time eventName Participant amt
where mycount (eventName)
>= 3 AND mvfind (eventName, npp 1040) but not getting any result
Please edit your query to use code blocks
</> to format it - as it stands is almost impossible to work out what is your query - plenty of strange things in there, including a random K and a plus sign and seemingly missing pipe symbols as well as missing double quotes where they would be expected and stats clauses that don't make a lot of sense.