Skip to main content Link Search Menu Expand Document (external link)

Processing - export

Table of contents
  • export tableName

Save the current default table to a named table.

Example:

function  loadDevices()
  load resource FEHxDevice
  let {uuid="_id", ad_common_names, hostname,last_poll_ip,last_poll_timestamp,primary_ip_address, osName="os.product_name"}=f("@FEHxDevice")
end

function loadUniqueDevices()
  load resource FEHxDevice
  let {uuid="_id", ad_common_names, hostname,last_poll_ip,last_poll_timestamp,primary_ip_address, osName="os.product_name"}=f("@FEHxDevice")
  aggregate last_poll_timestamp=max(last_poll_timestamp) by hostname
end

function  loadAgents()
  load resource sentinelOneAgent
  let {uuid, computerName} = f("@sentinelOneAgent")
end

stream  devices=loadDevices()
stream  uniqueDevices=loadUniqueDevices()
join devices on hostname, last_poll_timestamp
export fireeyeHxDevices

Here, only the last two table: current (default) table and “fireeyeHxDevices”, which are the same because of the command export. The other result tables before these two tables refer to the similar example in join