cancel
Showing results for 
Search instead for 
Did you mean: 
TK45
Level 9

Question about nquery command.

Jump to solution

Hi,

What is the difference following command A and B?

A:

nquery -d '/usr/local/ess/data/ngcp.dfl|127.0.0.1|1111' -q 'show partition from alert'

B:

nquery -d '/usr/local/ess/data/ngcp.dfl|127.0.0.1|1110' -q 'show partition from alert'

In my environment, the results of command is different.

McAfee-ETM-VM12 / # nquery -d '/usr/local/ess/data/ngcp.dfl|127.0.0.1|1111' -q 'show partition from alert'

executing queryToRun: [show partition from alert]

queryToRun 100% complete, 00:00.000 elapsed

McAfee-ETM-VM12 / #

McAfee-ETM-VM12 / #

McAfee-ETM-VM12 / # nquery -d '/usr/local/ess/data/ngcp.dfl|127.0.0.1|1110' -q 'show partition from alert'

executing queryToRun: [show partition from alert]

queryToRun 100% complete, 00:00.000 elapsed

SHOW

Partition      4 | 08/24/2017 00:00:00.000 to 10/31/2017 23:59:59.999 |attached  |           6,507 recs|v193956454654519|mod 10/31/2017 06:59:25|open

Partition      3 | 08/16/2017 23:46:38.000 to 08/16/2017 23:46:38.000 |attached  |               1 recs|v193956454654519|mod 08/16/2017 23:48:40|open

Partition      2 | 06/22/2017 02:56:23.000 to 08/10/2017 04:13:43.000 |attached  |          48,391 recs|v193956454654519|mod 08/10/2017 04:13:49|open

Partition      1 | 05/25/2016 17:59:33.000 to 05/25/2016 18:05:41.000 |attached  |              11 recs|v193956454654519|mod 05/25/2016 18:05:40|open

Thanks,

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: Question about nquery command.

Jump to solution

Messing about with the database is not something anyone should be doing on any production box.

That being said, cpservice used to be a monolithic process but was split into two parts to separate the UI from the backend so dbservice was created. This means in later versions cpservice still has port 1111 but doesn't have your data anymore, but dbservice at port 1110 does.

0 Kudos
1 Reply
McAfee Employee

Re: Question about nquery command.

Jump to solution

Messing about with the database is not something anyone should be doing on any production box.

That being said, cpservice used to be a monolithic process but was split into two parts to separate the UI from the backend so dbservice was created. This means in later versions cpservice still has port 1111 but doesn't have your data anymore, but dbservice at port 1110 does.

0 Kudos