...
- Derived Software rules are implemented as select statements in SQL
- An ETL script parses these SQL files.
- Appropriate inserts are performed on rows in the lookup, SoftwareInstance and other tables as appropriate by the execution of the ETL.
- A “Rule Status” flag is included in Derived Software rules, to allow an indicative status of a rule to be specified; For example, “Unverified” or “Accepted by Vendor”.
- Following must be included within a comment at the start of the SQL file. The Derived Software ETL will parse these and insert appropriate entries into the database.
- This will be used by iQExplore to show summary counts of number of matches by rule name and vendor. o RuleName o SoftwareName o RuleStatus: Not Verified by default o RuleCategory o Vendor
- Users of iQSonar Explore can make selections within QlikView, for example selecting process names, etc. Such selections can be saved as a standard QlikView bookmark.
- Users can subsequently choose to share such selections with iQuate.
- iQuate will review such selections and build the corresponding SQL manually corresponding to the selections made by the user.
...
In this example the Rule name will appear as Microsoft Windows, Software name will be Microsoft Windows and the vendor will be Microsoft. For each match of on the select statement that follows it.
...
You do not need to change anything else, rest of the rule will support the search you have created. Please see full rule below.
...