Thanks a lot for search query and detailed explanation! ... View more

Thanks for your response. But I am facing same issue as above with new query. For example, please find below event log which shows Failed password was entered twice. But stats shows failed count as 1 Event Logs: 7/28/17 8:59:30.000 AM Jul 28 06:59:30 <> sshd[12314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=<> user=xyz Jul 28 06:59:32 <> sshd[12314]: Failed password for xyz from <> port 56814 ssh2 Jul 28 06:59:36 <> sshd[12314]: Failed password for xyz from <> port 56814 ssh2 Jul 28 06:59:43 <> sshd[12314]: Accepted password for xyzfrom 10 Stats: User _time FailedCount xyz 2017-07-28 08:59:30 1 ... View more

Fixed the error bu configuring DB input with following query for rising column Select * from ( SELECT *, (cast( cast(datepart(year, eventtime) as varchar) + right('0' + cast (datepart(month, eventtime) as varchar),2) + right('0' + cast (datepart(day,eventtime) as varchar),2) + right('0' + cast (datepart(hour,eventtime) as varchar),2) + right('0' + cast (datepart(minute,eventtime) as varchar),2) + right('0' + cast (datepart(second,eventtime) as varchar),2) + right('0' + cast (datepart(millisecond,eventtime) as varchar),3) as numeric(18,0))) as id FROM "sybsecurity"."dbo"."sysaudits_01" ) dt where dt.id > ? order by dt.id ... View more