I am new to Sentinel SDK and lucene. I am trying to develop a custom
report using the lucene query and I need to run a query with a self join
and retrieve data and display it.

Since we cannot use Joins, Self Joins and queries similar to SQL in
Lucene query. What would be the best option available to run a complex
query with self joins using the lucene query. In the forum, some of the
replies have said that we can use Report Data Definition in the SDK and
store the events in database and run the queries on this stored events.

Would some one help me to find out some documentation of step by step
how to achieve this, appreciate if the documentation/article/TID
contains details of creating the RDD and using this in the Report and
using the lucene query.

Appreciate quick response. Thanks in advance.


sids2012's Profile: https://forums.netiq.com/member.php?userid=2562
View this thread: https://forums.netiq.com/showthread.php?t=42712