SELECT http_host AS FQDN, common_server_ip, max(common_recv_time) AS LAST_FOUND_TIME, min(common_recv_time) AS FIRST_FOUND_TIME, count() AS COUNT_TOTAL, toString(groupUniqArray(10000)(common_client_ip)) AS DIST_CIP_RECENT, 'HTTP' AS schema_type FROM tsg_galaxy_v3.session_record_local WHERE ((common_recv_time >= 1672210800) AND (common_recv_time < 1672214400) AND (common_schema_type = 'HTTP')) AND (FQDN != '') GROUP BY http_host, common_server_ip HAVING (LAST_FOUND_TIME >= 1672212240) AND (LAST_FOUND_TIME < 1672212960)



SELECT http_host AS FQDN, common_server_ip, max(common_recv_time) AS LAST_FOUND_TIME, min(common_recv_time) AS FIRST_FOUND_TIME, count() AS COUNT_TOTAL, toString(groupUniqArray(10000)(common_client_ip)) AS DIST_CIP_RECENT, 'HTTP' AS schema_type FROM tsg_galaxy_v3.session_record_local WHERE ((common_recv_time >= 1672210800) AND (common_recv_time < 1672214400) AND (common_schema_type = 'HTTP')) AND (FQDN != '') GROUP BY http_host, common_server_ip HAVING (LAST_FOUND_TIME < 1672211520) OR isNull(LAST_FOUND_TIME)



SELECT http_host AS FQDN, common_server_ip, max(common_recv_time) AS LAST_FOUND_TIME, min(common_recv_time) AS FIRST_FOUND_TIME, count() AS COUNT_TOTAL, toString(groupUniqArray(10000)(common_client_ip)) AS DIST_CIP_RECENT, 'HTTP' AS schema_type FROM tsg_galaxy_v3.session_record_local WHERE ((common_recv_time >= 1672210800) AND (common_recv_time < 1672214400) AND (common_schema_type = 'HTTP')) AND (FQDN != '') GROUP BY http_host, common_server_ip HAVING LAST_FOUND_TIME >= 1672213680



SELECT http_host AS FQDN, common_server_ip, max(common_recv_time) AS LAST_FOUND_TIME, min(common_recv_time) AS FIRST_FOUND_TIME, count() AS COUNT_TOTAL, toString(groupUniqArray(10000)(common_client_ip)) AS DIST_CIP_RECENT, 'HTTP' AS schema_type FROM tsg_galaxy_v3.session_record_local WHERE ((common_recv_time >= 1672210800) AND (common_recv_time < 1672214400) AND (common_schema_type = 'HTTP')) AND (FQDN != '') GROUP BY http_host, common_server_ip HAVING (LAST_FOUND_TIME >= 1672211520) AND (LAST_FOUND_TIME < 1672212240)



SELECT http_host AS FQDN, common_server_ip, max(common_recv_time) AS LAST_FOUND_TIME, min(common_recv_time) AS FIRST_FOUND_TIME, count() AS COUNT_TOTAL, toString(groupUniqArray(10000)(common_client_ip)) AS DIST_CIP_RECENT, 'HTTP' AS schema_type FROM tsg_galaxy_v3.session_record_local WHERE ((common_recv_time >= 1672210800) AND (common_recv_time < 1672214400) AND (common_schema_type = 'HTTP')) AND (FQDN != '') GROUP BY http_host, common_server_ip HAVING (LAST_FOUND_TIME >= 1672212960) AND (LAST_FOUND_TIME < 1672213680)


SELECT common_server_ip AS server_ip FROM tsg_galaxy_v3.session_record_local AS session_record WHERE (common_recv_time >= toDateTime('2022-12-27 07:48:00')) AND (common_recv_time < toDateTime('2022-12-28 07:48:00')) AND (common_l4_protocol IN ('IPv4_TCP', 'IPv6_TCP')) GROUP BY server_ip ORDER BY uniq(common_client_ip) DESC LIMIT 200000



SELECT toDateTime(toDateTime(toUnixTimestamp(toDateTime(toStartOfInterval(toDateTime(toUnixTimestamp(common_recv_time)), toIntervalMinute(1)))))) AS stat_time, common_schema_type AS type, sum(common_sessions) AS sessions, sum(common_c2s_byte_num + common_s2c_byte_num) AS bytes, sum(common_c2s_pkt_num + common_s2c_pkt_num) AS packets FROM tsg_galaxy_v3.session_record_local AS session_record WHERE ((common_recv_time >= toUnixTimestamp('2022-12-28 07:03:58')) AND (common_recv_time < toUnixTimestamp('2022-12-28 08:03:58'))) AND (common_server_ip = '172.67.74.35') GROUP BY toDateTime(toDateTime(toUnixTimestamp(toDateTime(toStartOfInterval(toDateTime(toUnixTimestamp(common_recv_time)), toIntervalMinute(1)))))), common_schema_type LIMIT 100000