Saviynt SIEM Integration

[vardhan_Reddy]

Hi Team,

We are working on Saviynt SIEM integration. In the document portal it was mentioned to Create a new runtime analytics control (V2) using an SQL query.

We are on 24.3 version and when I try to create runtime analytics "using SQL query" and paste the runtime query in it, the analytics is not creating as runtime analytics. I can create directly "runtime analytics" but it is creating as V1 analytics but as per document, we need to create V2 analytics. 

Please let me know how to create a runtime analytics using SQL query.

[rushikeshvartak]

Did you enabled merged analytics configuration in global config.

Check analyticstype in analyticsconfiges table

[vardhan_Reddy]

Hi,

Yes, I have enabled merged enable configuration and analyticstype is '2' as well but when I run the analytics, It is not prompting me to enter the timeFrame dynamically. 

Same analytics I have created in dev instance and I was able to create it as runtime analytics using SQL query

But, When I try to create same kind of anaytics in non-prod The analytics is not creating as runtime analytics using SQL query

[rushikeshvartak · Accepted solution]

Update analyticstype in dev using enhanced query

[vardhan_Reddy]

You mean whatever analyticstype I have in Dev should I update same in non-pod as well

Dev is working as expected.