Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  How to use the "_id":{$did: "$$LMRM_LASTDID"}

    Posted 10-19-2023 15:22

    Hello dear community,

    I have a problem when creating pipelines, I am trying to use the "_id":{$did: "$$LMRM_LASTDID"}  but when I run it it gives me the error seen in the image, this already came by default in the jSonar pipes and it still doesn't work. Could you give me an example of how to use it correctly?

    My idea is to bring the last successful logins and send them to Splunk every time the task is executed and that these are not repeated, that they are always new events.


    we are using Sonar v4.11

    I hope you can help me.

    Thank you so much.

    Best regards.


    #jSonar

    ------------------------------
    Jorge Aguila
    engineer
    NEOSECURE S.A
    Región Metropolitana
    ------------------------------


  • 2.  RE: How to use the "_id":{$did: "$$LMRM_LASTDID"}
    Best Answer

    Posted 10-25-2023 10:10

    Hi Jorge,

    $$LMRM_LASTDID is a special built-in date bind variable.  It is available only when connected to SonarW.   This error occurs otherwise.  Hope this helps.

    Thanks,

    Paul.



    ------------------------------
    Paul Zytariuk
    Team Lead, Technology
    M&T Bank Corporation
    Buffalo NY
    ------------------------------



  • 3.  RE: How to use the "_id":{$did: "$$LMRM_LASTDID"}

    Posted 10-25-2023 10:54

    Hello,

    thanks for answering. But, "only when connected to SonarW" means...? Should I automate the task in the scheduler so that it works with lastdid?

    Best Regards. 



    ------------------------------
    Jorge Aguila
    engineer
    NEOSECURE S.A
    Región Metropolitana
    ------------------------------

    Original Message


  • 4.  RE: How to use the "_id":{$did: "$$LMRM_LASTDID"}

    Posted 10-25-2023 12:03

    Hi Jorge,

     

    Yes, it will work through the scheduler. 

     

    Thanks,

    Paul

     




    Original Message


  • 5.  RE: How to use the "_id":{$did: "$$LMRM_LASTDID"}

    Posted 10-25-2023 13:07

    Paul,

    Thank you very much for your help.

    Best regards.



    ------------------------------
    Jorge Aguila
    engineer
    NEOSECURE S.A
    Región Metropolitana
    ------------------------------

    Original Message