Revert "[CN-1568] 数字地平线相关ck库表调整"

This reverts commit f39322ec5a.
This commit is contained in:
houjinchuan
2024-03-29 17:24:23 +08:00
parent f39322ec5a
commit 472d691693
3 changed files with 7 additions and 81 deletions

View File

@@ -1,4 +0,0 @@
set distributed_ddl_task_timeout = 180;
SELECT status, is_builtin, rule_type, victim_ip,victim_country_region, victim_super_admin_area, victim_admin_area, victim_longitude, victim_latitude, offender_ip, offender_country_region, offender_super_admin_area, offender_admin_area, offender_longitude, offender_latitude, offender_ip, event_info, event_key, severity, event_type, duration_s, event_name, app, `domain`, event_id, rule_id, start_time, end_time, match_times
FROM cyber_narrator_galaxy.cn_security_event where start_time >= toUnixTimestamp('2030-01-01 00:00:00') AND start_time <toUnixTimestamp('2030-01-01 00:00:01');

View File

@@ -1,37 +0,0 @@
set distributed_ddl_task_timeout = 180;
ALTER table cyber_narrator_galaxy.cn_security_event_local on cluster ck_cluster
add column IF NOT EXISTS offender_latitude Nullable(Float64) after offender_ip,
add column IF NOT EXISTS offender_longitude Nullable(Float64) after offender_ip,
add column IF NOT EXISTS offender_admin_area String after offender_ip,
add column IF NOT EXISTS offender_super_admin_area String after offender_ip,
add column IF NOT EXISTS offender_country_region String after offender_ip,
add column IF NOT EXISTS victim_latitude Nullable(Float64) after victim_ip,
add column IF NOT EXISTS victim_longitude Nullable(Float64) after victim_ip,
add column IF NOT EXISTS victim_admin_area String after victim_ip,
add column IF NOT EXISTS victim_super_admin_area String after victim_ip,
add column IF NOT EXISTS victim_country_region String after victim_ip;
ALTER table cyber_narrator_galaxy.cn_security_event on cluster ck_cluster
add column IF NOT EXISTS offender_latitude Nullable(Float64) after offender_ip,
add column IF NOT EXISTS offender_longitude Nullable(Float64) after offender_ip,
add column IF NOT EXISTS offender_admin_area String after offender_ip,
add column IF NOT EXISTS offender_super_admin_area String after offender_ip,
add column IF NOT EXISTS offender_country_region String after offender_ip,
add column IF NOT EXISTS victim_latitude Nullable(Float64) after victim_ip,
add column IF NOT EXISTS victim_longitude Nullable(Float64) after victim_ip,
add column IF NOT EXISTS victim_admin_area String after victim_ip,
add column IF NOT EXISTS victim_super_admin_area String after victim_ip,
add column IF NOT EXISTS victim_country_region String after victim_ip;
ALTER table cyber_narrator_galaxy.cn_security_event on cluster ck_query
add column IF NOT EXISTS offender_latitude Nullable(Float64) after offender_ip,
add column IF NOT EXISTS offender_longitude Nullable(Float64) after offender_ip,
add column IF NOT EXISTS offender_admin_area String after offender_ip,
add column IF NOT EXISTS offender_super_admin_area String after offender_ip,
add column IF NOT EXISTS offender_country_region String after offender_ip,
add column IF NOT EXISTS victim_latitude Nullable(Float64) after victim_ip,
add column IF NOT EXISTS victim_longitude Nullable(Float64) after victim_ip,
add column IF NOT EXISTS victim_admin_area String after victim_ip,
add column IF NOT EXISTS victim_super_admin_area String after victim_ip,
add column IF NOT EXISTS victim_country_region String after victim_ip;

View File

@@ -1906,21 +1906,12 @@ GROUP BY
CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event_local ON CLUSTER ck_cluster
(
status Int64,
is_builtin Int64,
rule_type String,
victim_ip String,
victim_country_region String,
victim_super_admin_area String,
victim_admin_area String,
victim_longitude Nullable(Float64),
victim_latitude Nullable(Float64),
offender_ip String,
offender_country_region String,
offender_super_admin_area String,
offender_admin_area String,
offender_longitude Nullable(Float64),
offender_latitude Nullable(Float64),
event_info String,
event_key String,
severity String,
@@ -1944,17 +1935,7 @@ TTL toDateTime(end_time) + toIntervalSecond(2592000),
is_builtin = anyLast(is_builtin),
rule_type = anyLast(rule_type),
victim_ip = anyLast(victim_ip),
victim_country_region = anyLast(victim_country_region),
victim_super_admin_area = anyLast(victim_super_admin_area),
victim_admin_area = anyLast(victim_admin_area),
victim_longitude = anyLast(victim_longitude),
victim_latitude = anyLast(victim_latitude),
offender_ip = anyLast(offender_ip),
offender_country_region = anyLast(offender_country_region),
offender_super_admin_area = anyLast(offender_super_admin_area),
offender_admin_area = anyLast(offender_admin_area),
offender_longitude = anyLast(offender_longitude),
offender_latitude = anyLast(offender_latitude),
event_info = anyLast(event_info),
event_key = anyLast(event_key),
severity = anyLast(severity),
@@ -1971,21 +1952,12 @@ TTL toDateTime(end_time) + toIntervalSecond(2592000),
CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event ON CLUSTER ck_cluster
(
status Int64,
is_builtin Int64,
rule_type String,
victim_ip String,
victim_country_region String,
victim_super_admin_area String,
victim_admin_area String,
victim_longitude Nullable(Float64),
victim_latitude Nullable(Float64),
offender_ip String,
offender_country_region String,
offender_super_admin_area String,
offender_admin_area String,
offender_longitude Nullable(Float64),
offender_latitude Nullable(Float64),
event_info String,
event_key String,
severity String,
@@ -2007,21 +1979,12 @@ ENGINE = Distributed('ck_cluster',
CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event ON CLUSTER ck_query
(
status Int64,
is_builtin Int64,
rule_type String,
victim_ip String,
victim_country_region String,
victim_super_admin_area String,
victim_admin_area String,
victim_longitude Nullable(Float64),
victim_latitude Nullable(Float64),
offender_ip String,
offender_country_region String,
offender_super_admin_area String,
offender_admin_area String,
offender_longitude Nullable(Float64),
offender_latitude Nullable(Float64),
event_info String,
event_key String,
severity String,
@@ -2040,3 +2003,7 @@ ENGINE = Distributed('ck_cluster',
'cyber_narrator_galaxy',
'cn_security_event_local',
rand());