[arcsight@esm003jp ~]$ /opt/arcsight/manager/bin/arcsight arcdt runsql -f /tmp/dummy.sql -type EndTime -ss 2023-02-20-15-50-00-000-JST -se 2023-02-20-16-00-00-000-JST Assuming ARCSIGHT_HOME: /opt/arcsight/manager Assuming JAVA_HOME: /opt/arcsight/java/esm/current/jre ArcSight Diagnostics Tool starting ... RunSQL sessionId: 524288186 executing sql statement: set arc_logger_usersessionId =524288186; Input startDate and endDate values: startDate: Mon Feb 20 15:50:00 JST 2023 1676875800000 endDate: Mon Feb 20 16:00:00 JST 2023 1676876400000 RunSQL sessionId: 524288186 [arcsight@esm003jp ~]$ /opt/arcsight/logger/current/arcsight/bin/mysql -D arcsight -uarcsight -p Enter password: Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 862 Server version: 5.7.33 Source distribution Copyright (c) 2000, 2021, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> set arc_logger_usersessionId =524288186; Query OK, 0 rows affected (0.00 sec) mysql> select end_time, manager_receipt_time from arc_event where name = 'Test Alert Event'; Empty set (0.27 sec) mysql> exit Bye [arcsight@esm003jp ~]$ /opt/arcsight/manager/bin/arcsight arcdt runsql -f /tmp/dummy.sql -type mrt -ss 2023-02-20-15-50-00-000-JST -se 2023-02-20-16-00-00-000-JST Assuming ARCSIGHT_HOME: /opt/arcsight/manager Assuming JAVA_HOME: /opt/arcsight/java/esm/current/jre ArcSight Diagnostics Tool starting ... RunSQL sessionId: 524288198 executing sql statement: set arc_logger_usersessionId =524288198; Input startDate and endDate values: startDate: Mon Feb 20 15:50:00 JST 2023 1676875800000 endDate: Mon Feb 20 16:00:00 JST 2023 1676876400000 RunSQL sessionId: 524288198 [arcsight@esm003jp ~]$ /opt/arcsight/logger/current/arcsight/bin/mysql -D arcsight -uarcsight -p Enter password: Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 879 Server version: 5.7.33 Source distribution Copyright (c) 2000, 2021, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> set arc_logger_usersessionId =524288198; Query OK, 0 rows affected (0.00 sec) mysql> select end_time, manager_receipt_time, event_type from arc_event where name = 'Test Alert Event' and event_type = 0 ; +-------------------------+-------------------------+------------+ | end_time | manager_receipt_time | event_type | +-------------------------+-------------------------+------------+ | 2023-02-20 06:40:00.000 | 2023-02-20 06:54:12.970 | 0 | +-------------------------+-------------------------+------------+ 1 row in set (0.26 sec) mysql>