this is one of them: `SELECT *, "events_windows." ...
# corej
Juan Alvarez
04/06/2021, 2:33 PMthis is one of them:
SELECT *, "events_windows." || lower(source) || "." || eventid as __devoSubTag FROM windows_events WHERE source IN ('Application', 'Setup', 'Security', 'System');