diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/ck表升级步骤.md b/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/ck表升级步骤.md
index cbc7b3a..ff6ab73 100644
--- a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/ck表升级步骤.md	
+++ b/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/ck表升级步骤.md	
@@ -1,296 +1,297 @@
-由于需要升级多个数据中心，为了保证业务连续性且不丢失数据，采用实时增量同步的方法进行数据迁移。
-具体步骤：
-Step1 ：停止国家中心gohangout入库任务。
-Step2 ：23.07版本clickhouse库表_local表重命名_old,删除相关视图及废弃表。
-Step3 ：升级国家中心，初始化24.02版本clickhouse库表，并进行校验。
-Step4 ：国家中心ck创建同步物化视图（*_old->*_local）。gohangout入库任务修改配置将入库表修改为*_old,已经删除的库表对应的gohangout任务也可删除，重启gohangout。
-Step5 : 单个分中心升级，TSG OS →  分中心Kafka → 分中心ETL（grootstream）→ 国家中心（grootstream） →  24.02库表
-未升级的分中心仍保留原先的ETL任务最终汇入国家中心旧的kafka中→ 国家中心（gohangout） →  *_old库表 -> 24.02库表(ck物化视图同步)
-Step6 : 所有分中心升级完毕，关闭所有分中心ETL，国家中心gohangout 。
-Step7:  按照具体情况选择是否删除所有的历史表 xx_old，或是否启动离线同步历史数据任务。
-
-# 说明
-* 请按步骤依次执行，执行脚本报错时联系研发处理后再执行之后的步骤。  
-* 所有ck步骤都需要在query节点执行
-* 执行所有sql语句之前需要停止日志留存调度任务，确保ck中无分布式ddl语句H执行，否则执行的sql会阻塞住，影响后续步骤执行
-验证sql需要在query节点执行
-clickhouse-client -h 127.0.0.1 --port 9001 -m -u default --password ****** --query "select query  from system.distributed_ddl_queue where status =0 limit 1"
-若返回结果为空则可执行升级步骤，否则需要等待。
-
-# 一、停止旧表ck入库任务
-
-停止旧表ck入库任务
-
-# 二、旧表重命名为历史表
-
-重命名旧表, 删除废弃表
-```sql
-clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 01_rename_old_table.sql
-```
-
-# 三、初始化新表
-
-* 1.执行2402版本初始化建表语句
-```
-clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 02_init_new_table.sql
-```
-
-* 2.校验表结构
-```
-clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 03_check.sql
-```
-
-**无报错信息说明校验通过**
-
-# 四、创建旧表同步新表任务(可选)
-
-创建旧表同步到新表的物化视图(如果还有分数据中心向旧表写数据)
-```sh
-clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 04_create_table_2307_to_2402_view.sql
-```
-
-# 五、启动ck入库任务
-
-* 1.启动新表ck入库任务
-
-* 2.启动旧表ck入库任务(如果还有分数据中心向旧表写数据)
-```sh
-# 重命名旧表, 删除废弃表后, 存在的旧表:
-tsg_galaxy_v3.session_record_local_old
-tsg_galaxy_v3.security_event_local_old
-tsg_galaxy_v3.transaction_record_local_old
-tsg_galaxy_v3.voip_record_local_old
-tsg_galaxy_v3.proxy_event_local_old
-tsg_galaxy_v3.dos_event_local_old
-```
-
-# 六、各个数据中心全部升级完成后停止旧表ck入库任务
-
-* 1.升级各个数据中心，各个数据中心全部升级完成后，停止旧表ck入库任务(如果启动的话)
-
-* 2.删除旧表同步新表物化视图
-```sh
-clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 05_drop_table_2307_to_2402_view.sql
-```
-
-
-# 七、离线同步历史数据(可选)
-
-在query节点执行以下步骤，iplist.txt中为ck所有data节点ip地址。
-
-步骤描述：
-* 1.进入migrate_table_2402文件夹,使脚本可执行
-```
-chmod +x ./*.sh
-```
-
-* 2.分发迁移脚本到data节点
-```
-./01_send_migrate_table_scripts.sh
-```
-
-* 2.选择迁移某个表，同步需要时间区间的数据，时间区间:[实时同步任务开始时间向前推n天, 实时同步任务开始时间)，时间区间为左闭右开，不包含结束时间点。
-```
-# 迁移security_event表
-./02_start_migrate_table.sh security_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-```
-
-* 3.监控data节点迁移情况，所有表迁移完成后，确认每个节点同步数据成功/失败批次数，如有失败批次确认是否需要处理
-```
-# 监控security_event表迁移
-./03_monitor_migrate_table.sh security_event
-```
-
-* 4.选择下个张需要迁移的表，重复2-4步骤。支持选择迁移的表有: security_event, monitor_event, session_record, transaction_record, voip_record, proxy_event, dos_event。
-
-
-迁移和监控各个表执行命令示例：
-```sh
-# 迁移security_event表
-./02_start_migrate_table.sh security_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-# 监控security_event表迁移
-./03_monitor_migrate_table.sh security_event
-
-
-# 迁移monitor_event表
-./02_start_migrate_table.sh monitor_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-# 监控monitor_event表迁移
-./03_monitor_migrate_table.sh monitor_event
-
-
-# 迁移session_record表
-./02_start_migrate_table.sh session_record "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-# 监控session_record表迁移
-./03_monitor_migrate_table.sh session_record
-
-
-# 迁移transaction_record表
-./02_start_migrate_table.sh transaction_record "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-# 监控transaction_record表迁移
-./03_monitor_migrate_table.sh transaction_record
-
-
-# 迁移voip_record表
-./02_start_migrate_table.sh voip_record "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-# 监控voip_record表迁移
-./03_monitor_migrate_table.sh voip_record
-
-
-# 迁移proxy_event表
-./02_start_migrate_table.sh proxy_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-# 监控proxy_event表迁移
-./03_monitor_migrate_table.sh proxy_event
-
-
-# 迁移dos_event表
-./02_start_migrate_table.sh dos_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
-# 监控dos_event表迁移
-./03_monitor_migrate_table.sh dos_event
-```
-
-迁移日志无报错，数据迁移完成。
-
-如果有数据迁移失败批次，查看新老表迁移数据量对应情况(ck每台**data**节点)：
-```sql
--- security_event
-
-SELECT
-    date_trunc('day', toDateTime(common_recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.security_event_local_old
-WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-    and common_action in (16, 96)
-group by date_trunc('day', toDateTime(common_recv_time))
-order by d
-;
- 
-SELECT
-    date_trunc('day', toDateTime(recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.security_event_local
-WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(recv_time))
-order by d
-;
-
--- monitor_event
-
-SELECT
-    date_trunc('day', toDateTime(common_recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.security_event_local_old
-WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-    and common_action = 1
-group by date_trunc('day', toDateTime(common_recv_time))
-order by d
-;
- 
-SELECT
-    date_trunc('day', toDateTime(recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.monitor_event_local
-WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(recv_time))
-order by d
-;
-
--- session_record
-
-SELECT
-    date_trunc('day', toDateTime(common_recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.session_record_local_old
-WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(common_recv_time))
-order by d
-;
- 
-SELECT
-    date_trunc('day', toDateTime(recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.session_record_local
-WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(recv_time))
-order by d
-;
-
--- transaction_record
-
-SELECT
-    date_trunc('day', toDateTime(common_recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.transaction_record_local_old
-WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(common_recv_time))
-order by d
-;
- 
-SELECT
-    date_trunc('day', toDateTime(recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.transaction_record_local
-WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(recv_time))
-order by d
-;
-
--- voip_record
-
-SELECT
-    date_trunc('day', toDateTime(common_recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.voip_record_local_old
-WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(common_recv_time))
-order by d
-;
- 
-SELECT
-    date_trunc('day', toDateTime(recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.voip_record_local
-WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(recv_time))
-order by d
-;
-
--- proxy_event
-
-SELECT
-    date_trunc('day', toDateTime(common_recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.proxy_event_local_old
-WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(common_recv_time))
-order by d
-;
- 
-SELECT
-    date_trunc('day', toDateTime(recv_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.proxy_event_local
-WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(recv_time))
-order by d
-;
-
--- dos_event
-
-SELECT
-    date_trunc('day', toDateTime(start_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.dos_event_local_old
-WHERE start_time>= toUnixTimestamp('2024-01-10 00:00:00') and start_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(start_time))
-order by d
-;
- 
-SELECT
-    date_trunc('day', toDateTime(start_time)) d,
-    COUNT(1) cnt
-FROM tsg_galaxy_v3.dos_event_local
-WHERE start_time >= toUnixTimestamp('2024-01-10 00:00:00') and start_time < toUnixTimestamp('2024-01-20 00:00:00')
-group by date_trunc('day', toDateTime(start_time))
-order by d
-;
-```
\ No newline at end of file
+由于需要升级多个数据中心，为了保证业务连续性且不丢失数据，采用实时增量同步的方法进行数据迁移。
+具体步骤：  
+- Step1 ：停止国家中心gohangout入库任务。  
+- Step2 ：23.07版本clickhouse库表_local表重命名_old,删除相关视图及废弃表。  
+- Step3 ：升级国家中心，初始化24.02版本clickhouse库表，并进行校验。  
+- Step4 ：国家中心ck创建同步物化视图（*_old->*_local）。gohangout入库任务修改配置将入库表修改为*_old,已经删除的库表对应的gohangout任务也可删除，重启gohangout。  
+- Step5 : 单个分中心升级，TSG OS →  分中心Kafka → 分中心ETL（grootstream）→ 国家中心Kafka（*-PROCESSED） → 国家中心Groot →  24.02库表
+- 未升级的分中心仍保留原先的ETL任务，最终汇入国家中心kafka(*-COMPLETED)中→ 国家中心（gohangout） →  *_old库表 -> ck物化视图同步至24.02库表中  
+- Step6 : 所有分中心升级完毕，关闭国家中心gohangout，删除ck同步物化视图。  
+- Step7 :  按照具体情况选择是否删除所有的历史表 xx_old，或是否启动离线同步历史数据任务。  
+
+
+# 说明
+* 请按步骤依次执行，执行脚本报错时联系研发处理后再执行之后的步骤。  
+* 所有ck步骤都需要在query节点执行
+* 执行所有sql语句之前需要停止日志留存调度任务，确保ck中无分布式ddl语句H执行，否则执行的sql会阻塞住，影响后续步骤执行
+验证sql需要在query节点执行
+clickhouse-client -h 127.0.0.1 --port 9001 -m -u default --password ****** --query "select query  from system.distributed_ddl_queue where status =0 limit 1"
+若返回结果为空则可执行升级步骤，否则需要等待。
+
+# 一、停止旧表ck入库任务
+
+停止旧表ck入库任务
+
+# 二、旧表重命名为历史表
+
+重命名旧表, 删除废弃表
+```sql
+clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 01_rename_old_table.sql
+```
+
+# 三、初始化新表
+
+* 1.执行2402版本初始化建表语句
+```
+clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 02_init_new_table.sql
+```
+
+* 2.校验表结构
+```
+clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 03_check.sql
+```
+
+**无报错信息说明校验通过**
+
+# 四、创建旧表同步新表任务(可选)
+
+创建旧表同步到新表的物化视图(如果还有分数据中心向旧表写数据)
+```sh
+clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 04_create_table_2307_to_2402_view.sql
+```
+
+# 五、启动ck入库任务
+
+* 1.启动新表ck入库任务
+
+* 2.启动旧表ck入库任务(如果还有分数据中心向旧表写数据)
+```sh
+# 重命名旧表, 删除废弃表后, 存在的旧表:
+tsg_galaxy_v3.session_record_local_old
+tsg_galaxy_v3.security_event_local_old
+tsg_galaxy_v3.transaction_record_local_old
+tsg_galaxy_v3.voip_record_local_old
+tsg_galaxy_v3.proxy_event_local_old
+tsg_galaxy_v3.dos_event_local_old
+```
+
+# 六、各个数据中心全部升级完成后停止旧表ck入库任务
+
+* 1.升级各个数据中心，各个数据中心全部升级完成后，停止旧表ck入库任务(如果启动的话)
+
+* 2.删除旧表同步新表物化视图
+```sh
+clickhouse-client -h 127.0.0.1 --port 9001 -m -n -u default --password ****** --distributed_ddl_task_timeout 180 < 05_drop_table_2307_to_2402_view.sql
+```
+
+
+# 七、离线同步历史数据(可选)
+
+在query节点执行以下步骤，iplist.txt中为ck所有data节点ip地址。
+
+步骤描述：
+* 1.进入migrate_table_2402文件夹,使脚本可执行
+```
+chmod +x ./*.sh
+```
+
+* 2.分发迁移脚本到data节点
+```
+./01_send_migrate_table_scripts.sh
+```
+
+* 2.选择迁移某个表，同步需要时间区间的数据，时间区间:[实时同步任务开始时间向前推n天, 实时同步任务开始时间)，时间区间为左闭右开，不包含结束时间点。
+```
+# 迁移security_event表
+./02_start_migrate_table.sh security_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+```
+
+* 3.监控data节点迁移情况，所有表迁移完成后，确认每个节点同步数据成功/失败批次数，如有失败批次确认是否需要处理
+```
+# 监控security_event表迁移
+./03_monitor_migrate_table.sh security_event
+```
+
+* 4.选择下个张需要迁移的表，重复2-4步骤。支持选择迁移的表有: security_event, monitor_event, session_record, transaction_record, voip_record, proxy_event, dos_event。
+
+
+迁移和监控各个表执行命令示例：
+```sh
+# 迁移security_event表
+./02_start_migrate_table.sh security_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+# 监控security_event表迁移
+./03_monitor_migrate_table.sh security_event
+
+
+# 迁移monitor_event表
+./02_start_migrate_table.sh monitor_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+# 监控monitor_event表迁移
+./03_monitor_migrate_table.sh monitor_event
+
+
+# 迁移session_record表
+./02_start_migrate_table.sh session_record "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+# 监控session_record表迁移
+./03_monitor_migrate_table.sh session_record
+
+
+# 迁移transaction_record表
+./02_start_migrate_table.sh transaction_record "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+# 监控transaction_record表迁移
+./03_monitor_migrate_table.sh transaction_record
+
+
+# 迁移voip_record表
+./02_start_migrate_table.sh voip_record "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+# 监控voip_record表迁移
+./03_monitor_migrate_table.sh voip_record
+
+
+# 迁移proxy_event表
+./02_start_migrate_table.sh proxy_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+# 监控proxy_event表迁移
+./03_monitor_migrate_table.sh proxy_event
+
+
+# 迁移dos_event表
+./02_start_migrate_table.sh dos_event "2024-01-10 00:00:00" "2024-01-20 00:00:00" 60
+# 监控dos_event表迁移
+./03_monitor_migrate_table.sh dos_event
+```
+
+迁移日志无报错，数据迁移完成。
+
+如果有数据迁移失败批次，查看新老表迁移数据量对应情况(ck每台**data**节点)：
+```sql
+-- security_event
+
+SELECT
+    date_trunc('day', toDateTime(common_recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.security_event_local_old
+WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+    and common_action in (16, 96)
+group by date_trunc('day', toDateTime(common_recv_time))
+order by d
+;
+ 
+SELECT
+    date_trunc('day', toDateTime(recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.security_event_local
+WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(recv_time))
+order by d
+;
+
+-- monitor_event
+
+SELECT
+    date_trunc('day', toDateTime(common_recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.security_event_local_old
+WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+    and common_action = 1
+group by date_trunc('day', toDateTime(common_recv_time))
+order by d
+;
+ 
+SELECT
+    date_trunc('day', toDateTime(recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.monitor_event_local
+WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(recv_time))
+order by d
+;
+
+-- session_record
+
+SELECT
+    date_trunc('day', toDateTime(common_recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.session_record_local_old
+WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(common_recv_time))
+order by d
+;
+ 
+SELECT
+    date_trunc('day', toDateTime(recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.session_record_local
+WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(recv_time))
+order by d
+;
+
+-- transaction_record
+
+SELECT
+    date_trunc('day', toDateTime(common_recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.transaction_record_local_old
+WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(common_recv_time))
+order by d
+;
+ 
+SELECT
+    date_trunc('day', toDateTime(recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.transaction_record_local
+WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(recv_time))
+order by d
+;
+
+-- voip_record
+
+SELECT
+    date_trunc('day', toDateTime(common_recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.voip_record_local_old
+WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(common_recv_time))
+order by d
+;
+ 
+SELECT
+    date_trunc('day', toDateTime(recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.voip_record_local
+WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(recv_time))
+order by d
+;
+
+-- proxy_event
+
+SELECT
+    date_trunc('day', toDateTime(common_recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.proxy_event_local_old
+WHERE common_recv_time>= toUnixTimestamp('2024-01-10 00:00:00') and common_recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(common_recv_time))
+order by d
+;
+ 
+SELECT
+    date_trunc('day', toDateTime(recv_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.proxy_event_local
+WHERE recv_time >= toUnixTimestamp('2024-01-10 00:00:00') and recv_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(recv_time))
+order by d
+;
+
+-- dos_event
+
+SELECT
+    date_trunc('day', toDateTime(start_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.dos_event_local_old
+WHERE start_time>= toUnixTimestamp('2024-01-10 00:00:00') and start_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(start_time))
+order by d
+;
+ 
+SELECT
+    date_trunc('day', toDateTime(start_time)) d,
+    COUNT(1) cnt
+FROM tsg_galaxy_v3.dos_event_local
+WHERE start_time >= toUnixTimestamp('2024-01-10 00:00:00') and start_time < toUnixTimestamp('2024-01-20 00:00:00')
+group by date_trunc('day', toDateTime(start_time))
+order by d
+;
+```