I would like to be able to run the same query on different servers (or at least in different environments) and have a column appended to know where the data came from. I’m currently looking at compiling sites for MSSP filtering of events based on IP. My current query is:
SELECT *, (SELECT organization_name FROM dim_site WHERE name = ‘Environment Site’) as Region FROM dim_scan_engine
but this means ensuring a site is maintained in each region with the org populated. The same could be done with a tag or policy in each environment. I’d rather be able to pull some environmental data, like server name, etc, But this information doesn’t appear in the data model.
Is there any way to accomplish this?
thx