An error with my math:

This is correct:

FaultlinID, CVE, OPEN, CLOSED, TOTAL

3623, CVE-2013-1212, 3623, 1, 0, 1

3624, CVE-2013-1213, 3624,1,3,4

ty

Thank you very much.....that did the trick.

Thanks a lot Paul! I got the script working in our environment and my initial QA work indicates that the numbers are spot on. I am still trying to figure...

Thanks Paul.

I have the following based on ColdCoffee's suggestion.

SELECT SERVERIP, 9 AS BASESCOREVALUE, SUM(CASE WHEN (b.BASESCOREVALUE >= 9 and exploitabiltiy IN('H','F','POC') )

THEN 1 ELSE 0 END) [COUNT]

FROM EXAMPLETABLE A

LEFT JOIN...

Thank you for the replies. I am trying Paul's suggestion first which utilizes 'UNION ALL'

The way the query is written below I get inflated results (counts) if a ServerIP host...

Well gosh...whenever I ask a question on SSC I never get the answer I thought I needed....I always get something better.

I have been doing the calculation for DUEDATE in a...

Thank you for the information and the link to the article. I found that I am able to do what I needed within the analytics toolset that I have at...

Thanks....that is the information I needed.

Thank you everyone for the replies. I was able to accomplish this by modifying the CTE that made up the view (VULNS_VIEW). This appears to be functioning as I've tested...

I utilized your suggestion to fix my query

SELECT DISTINCT (vulnID), COUNT(vulnid) AS COUNT, MONTH(scandate) FROM [external.vuln_instances]

GROUP BY vulnID, scandate

ORDER by VULNID

Regards,

CK

Got it. Thanks for the replies and information.

Your sample worked. Thank you very much for the guidance.....I 'get' what is happening in your approach and will include it in my bag of tricks going forward.

CK