From ae929b7d4b5ef381efa880e2f882c4ca779a82df Mon Sep 17 00:00:00 2001 From: doufenghu Date: Thu, 16 May 2024 19:05:56 +0800 Subject: [PATCH] modify ddl and configuration template directory --- .../2021/TSG-21.09/Gohangout/.gitkeep | 0 .../2023/TSG-23.03/clickhouse/.gitkeep | 0 .../installation/clickhouse/cn_clickhouse_ddl.sql | 4258 ++++++++-------- .../installation/clickhouse/cn_clickhouse_ddl_check.sql | 0 .../installation/clickhouse/cn_nfsp_clickhouse_ddl.sql | 0 .../installation/groot_stream}/README.md | 0 .../etl_session_record_processed_kafka_to_cn_kafka | 0 .../installation/groot_stream}/grootstream.yaml | 0 .../installation/groot_stream}/udf.plugins | 0 .../2022/CN-22.03.rc1/clickhouse/update-03.rc1-ck.sql | 0 .../2022/CN-22.05/clickhouse/update-05-ck.sql | 0 .../2022/CN-22.09/clickhouse/update-09-ck.sql | 0 .../bin/ghoStart/start_gohangout_k2ck_cn_record.sh | 0 .../start_gohangout_k2ck_metric_application_cn.sh | 0 .../ghoStart/start_gohangout_k2ck_metric_asn_cn.sh | 0 .../ghoStart/start_gohangout_k2ck_metric_domain_cn.sh | 0 .../start_gohangout_k2ck_metric_http_host_cn.sh | 0 .../start_gohangout_k2ck_metric_idc_renter_cn.sh | 0 .../bin/ghoStart/start_gohangout_k2ck_metric_ip_cn.sh | 0 .../start_gohangout_k2ck_metric_protocol_cn.sh | 0 .../ghoStart/start_gohangout_k2ck_metric_region_cn.sh | 0 .../start_gohangout_k2ck_metric_ssl_sni_cn.sh | 0 .../2022/CN-22.09/gohangout/conf/k2ck_cn_record.yml | 0 .../gohangout/conf/k2ck_metric_application_cn.yml | 0 .../CN-22.09/gohangout/conf/k2ck_metric_asn_cn.yml | 0 .../CN-22.09/gohangout/conf/k2ck_metric_domain_cn.yml | 0 .../gohangout/conf/k2ck_metric_http_host_cn.yml | 0 .../gohangout/conf/k2ck_metric_idc_renter_cn.yml | 0 .../CN-22.09/gohangout/conf/k2ck_metric_ip_cn.yml | 0 .../gohangout/conf/k2ck_metric_protocol_cn.yml | 0 .../CN-22.09/gohangout/conf/k2ck_metric_region_cn.yml | 0 .../gohangout/conf/k2ck_metric_ssl_sni_cn.yml | 0 .../upgrade}/2022/CN-22.09/gohangout/start_all.sh | 0 .../2022/CN-22.10/clickhouse/update-10-ck.sql | 0 .../start_gohangout_k2ck_metric_dns_qname_cn.sh | 0 .../start_gohangout_k2ck_metric_dns_qtype_cn.sh | 0 .../start_gohangout_k2ck_metric_dns_rcode_cn.sh | 0 .../start_gohangout_k2ck_metric_dns_rr_a_cn.sh | 0 .../start_gohangout_k2ck_metric_dns_rr_aaaa_cn.sh | 0 .../start_gohangout_k2ck_metric_dns_rr_cname_cn.sh | 0 .../start_gohangout_k2ck_metric_dns_server_ip_cn.sh | 0 .../ghoStart/start_gohangout_k2ck_metric_link_cn.sh | 0 .../gohangout/conf/k2ck_metric_dns_qname_cn.yml | 0 .../gohangout/conf/k2ck_metric_dns_qtype_cn.yml | 0 .../gohangout/conf/k2ck_metric_dns_rcode_cn.yml | 0 .../gohangout/conf/k2ck_metric_dns_rr_a_cn.yml | 0 .../gohangout/conf/k2ck_metric_dns_rr_aaaa_cn.yml | 0 .../gohangout/conf/k2ck_metric_dns_rr_cname_cn.yml | 0 .../gohangout/conf/k2ck_metric_dns_server_ip_cn.yml | 0 .../CN-22.10/gohangout/conf/k2ck_metric_link_cn.yml | 0 .../upgrade}/2022/CN-22.10/gohangout/start_all.sh | 0 .../upgrade}/2023/CN-23.02/.gitkeep | 0 .../upgrade}/2023/CN-23.02/clickhouse/.gitkeep | 0 .../2023/CN-23.02/clickhouse/update-02-ck.sql | 0 .../upgrade}/2023/CN-23.06/.gitkeep | 0 .../upgrade}/2023/CN-23.06/clickhouse/.gitkeep | 0 .../2023/CN-23.06/clickhouse/update-23.06-ck.sql | 0 .../2023/CN-23.07/clickhouse/update-23.07-ck.sql | 0 .../2023/CN-23.09/clickhouse/update-23.09-ck.sql | 0 ...t_gohangout_k2ck_metric_ip_dynamic_attribute_cn.sh | 0 .../start_gohangout_k2ck_metric_relation_cn.sh | 0 .../conf/k2ck_metric_ip_dynamic_attribute_cn.yml | 0 .../gohangout/conf/k2ck_metric_relation_cn.yml | 0 .../upgrade}/2023/CN-23.09/gohangout/start_all.sh | 0 .../2023/CN-23.10/clickhouse/update-23.10-ck.sql | 0 .../upgrade}/2023/CN-23.10/gohangout/.gitkeep | 0 .../start_gohangout_k2ck_security_event_cn.sh | 0 .../gohangout/conf/k2ck_security_event_cn.yml | 0 .../upgrade}/2023/CN-23.10/gohangout/start_all.sh | 0 .../2023/CN-23.12/clickhouse/update-23.12-ck.sql | 0 .../start_gohangout_k2ck_metric_subscriber_app_cn.sh | 0 .../gohangout/conf/k2ck_metric_subscriber_app_cn.yml | 0 .../upgrade}/2023/CN-23.12/gohangout/start_all.sh | 0 .../upgrade}/2024/CN-24.01.rc1/CN/groot/README.md | 0 .../CN/groot/etl_session_record_kafka_to_cn_kafka | 0 .../etl_session_record_processed_kafka_to_cn_kafka | 0 .../2024/CN-24.01.rc1/CN/groot}/grootstream.yaml | 0 .../upgrade}/2024/CN-24.01.rc1/CN/groot/udf.plugins | 0 .../CN-24.01.rc1/clickhouse/check-24.01.rc1-ck.sql | 0 .../CN-24.01.rc1/clickhouse/update-24.01.rc1-ck.sql | 0 .../2024/CN-24.03/clickhouse/check-24.03-ck.sql | 0 .../2024/CN-24.03/clickhouse/update-24.03-ck.sql | 0 .../start_gohangout_k2ck_location_subscriber_cn.sh | 0 .../gohangout/conf/k2ck_location_subscriber_cn.yml | 0 .../upgrade}/2024/CN-24.03/gohangout/start_all.sh | 0 .../upgrade}/2024/CN-24.04/CN/README.md | 0 .../CN-24.04/CN/etl_session_record_kafka_to_cn_kafka | 0 .../upgrade}/2024/CN-24.04/CN/grootstream.yaml | 0 .../upgrade}/2024/CN-24.04/CN/udf.plugins | 0 .../2024/CN-24.04/clickhouse/check-24.04-ck.sql | 0 .../2024/CN-24.04/clickhouse/update-24.04-ck.sql | 0 ...t_gohangout_k2ck_raw_cn_ip_dynamic_attribute_cn.sh | 0 ...gout_k2ck_raw_session_relation_domain_ip_app_cn.sh | 0 ...out_k2ck_raw_session_relation_subscriber_app_cn.sh | 0 .../conf/k2ck_raw_cn_ip_dynamic_attribute_cn.yml | 0 .../k2ck_raw_session_relation_domain_ip_app_cn.yml | 0 .../k2ck_raw_session_relation_subscriber_app_cn.yml | 0 .../upgrade}/2024/CN-24.04/start_all.sh | 0 .../01_cat_old_table_row_count.sql | 20 +- .../01_rename_old_table.sql | 214 +- .../02_init_new_table.sql | 0 .../TSG 2307版本到2402版本升级操作/03_check.sql | 0 .../04_create_table_2307_to_2402_view.sql | 4288 ++++++++--------- .../05_drop_table_2307_to_2402_view.sql | 20 +- .../06_drop_old_table.sql | 34 +- .../TSG 2307版本到2402版本升级操作/ck表升级步骤.md | 0 .../migrate_table_2402/01_send_migrate_table_scripts.sh | 0 .../migrate_table_2402/02_start_migrate_table.sh | 0 .../migrate_table_2402/03_monitor_migrate_table.sh | 0 .../migrate_table_2402/iplist.txt | 0 .../migrate_table_2402/migrate_local_table_to_2402.sh | 0 .../migrate_table_2402/start_migrate_local_table_to_2402.sh | 0 .../01_create_table_2401.sql | 0 .../02_create_table_2310_to_2401_view.sql | 0 .../03_rename_table.sql | 0 .../04_init_new_table.sql | 0 .../TSG 2310版本到2401版本升级操作/05_check.sql | 0 .../TSG 2310版本到2401版本升级操作/ck表升级步骤.md | 0 .../migrate_table_2401/01_send_migrate_table_scripts.sh | 0 .../migrate_table_2401/02_start_migrate_table.sh | 0 .../migrate_table_2401/03_monitor_migrate_table.sh | 0 .../migrate_table_2401/iplist.txt | 0 .../migrate_table_2401/migrate_local_table_to_2401.sh | 0 .../migrate_table_2401/start_migrate_local_table_to_2401.sh | 0 .../TSG历史版本建表语句/22.11_LTS_建表语句/.gitkeep | 0 .../22.11_LTS_建表语句/create_ck_table.sql | 0 .../TSG历史版本建表语句/22.11_LTS_建表语句/update.sql | 0 .../TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句.sql | 0 .../Clickhouse_TSG_建表语句_2023-07.sql | 0 .../Clickhouse_TSG_建表语句_2023-08.sql | 0 .../TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句.sql | 0 .../Clickhouse_TSG_建表语句_2023-07.sql | 0 .../Clickhouse_TSG_建表语句_2023-08.sql | 0 .../clickhouse}/sql文件同步自动化检测方案/.gitkeep | 0 .../sql文件同步自动化检测方案/sqlFilesAutoDetect.py | 0 .../sql文件同步自动化检测检测原理及执行效果.doc | Bin .../installation/clickhouse}/system.sql | 0 .../installation/clickhouse/tsg_olap_clickhouse_ddl.sql | 0 .../clickhouse/tsg_olap_clickhouse_ddl_check.sql | 0 .../clickhouse/tsg_olap_clickhouse_ddl_deprecated.sql | 0 .../installation/clickhouse}/性能测试脚本/ck_query.sh | 0 .../clickhouse}/性能测试脚本/query-new.sql | 0 .../clickhouse}/性能测试脚本/query-old.sql | 0 .../installation/clickhouse}/数据迁移脚本/iplist.txt | 0 .../installation/clickhouse}/数据迁移脚本/mig.sh | 0 .../clickhouse}/江苏项目/js-tsg-2402-create-table.sql | 0 .../cat_tmp_old_table_row_count.sql | 0 .../cat_v3_old_table_row_count.sql | 0 .../check_tsg_galaxy_tmp_24_02_table.sql | 0 .../init_tsg_galaxy_tmp_24_02_table.sql | 0 .../migrate_table_2402/01_send_migrate_table_scripts.sh | 0 .../migrate_table_2402/02_start_migrate_table.sh | 0 .../migrate_table_2402/03_monitor_migrate_table.sh | 0 .../migrate_table_2402/iplist.txt | 0 .../migrate_table_2402/migrate_local_table_to_2402.sh | 0 .../migrate_table_2402/start_migrate_local_table_to_2402.sh | 0 .../move_tmp_2307_to_tmp_2307_old.sql | 0 .../通用跨版本迁移数据步骤/move_v3_to_tmp.sql | 0 .../通用跨版本迁移数据步骤/通用跨版本迁移数据步骤.md | 0 .../installation/groot_stream}/README.md | 0 .../groot_stream}/etl_session_record_kafka_to_kafka | 0 .../installation/groot_stream}/grootstream.yaml | 0 .../session_record_processed_kafka_to_clickhouse | 0 .../installation/groot_stream}/udf.plugins | 0 .../集中式/dos_event_kafka_to_clickhouse | 0 .../etl_datapath_telemetry_record_kafka_to_clickhouse | 0 .../集中式/etl_proxy_event_kafka_to_clickhouse | 0 .../集中式/etl_session_record_kafka_to_clickhouse | 0 .../集中式/etl_transaction_record_kafka_to_clickhouse | 0 .../集中式/etl_voip_record_kafka_to_clickhouse | 0 .../installation/hbase}/HBase建表语句_TSG | 0 .../installation/hbase}/Phoenix建表语句_TSG.sql | 0 .../upgrade/2021/2021-02-01}/.gitkeep | 0 .../upgrade}/2021/2021-02-01/Release.md | 0 .../upgrade/2021/2021-02-01/clickhouse}/.gitkeep | 0 .../2021-02-01/clickhouse/20210201-5448-upsql.txt | 0 .../2021/2021-02-01/galaxy-qgw-service}/.gitkeep | 0 .../2021-02-01/galaxy-qgw-service/210201_新增ISN.zip | Bin .../upgrade}/2021/TSG-21.03/Clickhouse/add_column.sql | 0 .../upgrade}/2021/TSG-21.03/README.md | 0 .../TSG-21.03/查询引擎/connection_record_log.avsc | 0 .../2021/TSG-21.03/查询引擎/proxy_event_log.avsc | 0 .../2021/TSG-21.03/查询引擎/radius_record_log.avsc | 0 .../2021/TSG-21.03/查询引擎/security_event_log.avsc | 0 .../upgrade}/2021/TSG-21.03/查询引擎/version.json | 0 .../upgrade/2021/TSG-21.04}/.gitkeep | 0 .../upgrade}/2021/TSG-21.04/clickhouse/.gitkeep | 0 .../upgrade}/2021/TSG-21.04/clickhouse/add_column.sql | 0 .../2021/TSG-21.04/clickhouse/drop_cluster.sql | 0 .../upgrade}/2021/TSG-21.04/clickhouse/drop_query.sql | 0 .../upgrade/2021/TSG-21.05}/.gitkeep | 0 .../upgrade/2021/TSG-21.05/Clickhouse}/.gitkeep | 0 .../upgrade}/2021/TSG-21.05/Clickhouse/add_table.sql | 0 .../Clickhouse/change_colume_type_cluster.sql | 0 .../TSG-21.05/Clickhouse/change_colume_type_query.sql | 0 .../TSG-21.05/Clickhouse/connection_record_log.sql | 0 .../2021/TSG-21.05/Clickhouse/proxy_event_log.sql | 0 .../2021/TSG-21.05/Clickhouse/radius_record_log.sql | 0 .../2021/TSG-21.05/Clickhouse/security_event_log.sql | 0 .../TSG-21.05/Clickhouse/sys_packet_capture_log.sql | 0 .../2021/TSG-21.05/Clickhouse/voip_record_log.sql | 0 .../TSG-21.06/clickhouse/connection_record_log.sql | 0 .../clickhouse/createAllTables/create_ck_table.sql | 0 .../2021/TSG-21.06/clickhouse/createAllTables/dll.sql | 0 .../2021/TSG-21.06/clickhouse/gtpc_record_log.sql | 0 .../TSG-21.06/clickhouse/live_session_record_log.sql | 0 .../2021/TSG-21.06/clickhouse/proxy_event_log.sql | 0 .../2021/TSG-21.06/clickhouse/radius_record_log.sql | 0 .../2021/TSG-21.06/clickhouse/security_event_log.sql | 0 .../TSG-21.06/clickhouse/sys_packet_capture_log.sql | 0 .../TSG-21.06/clickhouse/transaction_record_log.sql | 0 .../2021/TSG-21.06/clickhouse/voip_record_log.sql | 0 .../TSG-21.07/clickhouse/active_defence_event_log.sql | 0 .../TSG-21.07/clickhouse/connection_record_log.sql | 0 .../2021/TSG-21.07/clickhouse/gtpc_record_log.sql | 0 .../TSG-21.07/clickhouse/live_session_record_log.sql | 0 .../2021/TSG-21.07/clickhouse/proxy_event_log.sql | 0 .../2021/TSG-21.07/clickhouse/radius_record_log.sql | 0 .../2021/TSG-21.07/clickhouse/security_event_log.sql | 0 .../TSG-21.07/clickhouse/sys_packet_capture_log.sql | 0 .../TSG-21.07/clickhouse/transaction_record_log.sql | 0 .../2021/TSG-21.07/clickhouse/voip_record_log.sql | 0 .../TSG-21.08/clickhouse/ck_column_2108_gal72.sql | 0 .../TSG-21.08/clickhouse/ck_column_2108_gal74.sql | 0 .../TSG-21.08/clickhouse/connection_record_log.sql | 0 .../2021/TSG-21.08/clickhouse/create_dos_tables.sql | 0 .../2021/TSG-21.08/clickhouse/gtpc_record_log.sql | 0 .../TSG-21.08/clickhouse/live_session_record_log.sql | 0 .../2021/TSG-21.08/clickhouse/proxy_event_log.sql | 0 .../2021/TSG-21.08/clickhouse/radius_record_log.sql | 0 .../2021/TSG-21.08/clickhouse/security_event_log.sql | 0 .../TSG-21.08/clickhouse/sys_packet_capture_log.sql | 0 .../TSG-21.08/clickhouse/transaction_record_log.sql | 0 .../2021/TSG-21.08/clickhouse/voip_record_log.sql | 0 .../druid/traffic_destination_ip_metrics_log.json | 0 .../2021/TSG-21.08/druid/traffic_summary_log.json | 0 .../start_gohangout_k2ck_dos_event_log_tsgv3.sh | 0 .../gohangout/conf/k2ck_dos_event_log_tsgv3.yml | 0 .../upgrade}/2021/TSG-21.08/gohangout/start_all.sh | 0 .../2021/TSG-21.09/Clickhouse/bloom_filter.sql | 0 .../upgrade}/2021/TSG-21.09/Clickhouse/rename.sql | 0 .../upgrade}/2021/TSG-21.09/Druid/tasks.txt | 0 .../TSG-21.09/Druid/tasks/proxy_event_hits_log.json | 0 .../Druid/tasks/security_event_hits_log.json | 0 .../2021/TSG-21.09/Druid/tasks/sys_storage_log.json | 0 .../2021/TSG-21.09/Druid/tasks/top_client_ip_log.json | 0 .../TSG-21.09/Druid/tasks/top_external_host_log.json | 0 .../TSG-21.09/Druid/tasks/top_internal_host_log.json | 0 .../2021/TSG-21.09/Druid/tasks/top_server_ip_log.json | 0 .../2021/TSG-21.09/Druid/tasks/top_urls_log.json | 0 .../2021/TSG-21.09/Druid/tasks/top_user_log.json | 0 .../TSG-21.09/Druid/tasks/top_website_domain_log.json | 0 .../TSG-21.09/Druid/tasks/traffic_app_stat_log.json | 0 .../TSG-21.09/Druid/tasks/traffic_metrics_log.json | 0 .../Druid/tasks/traffic_protocol_stat_log.json | 0 .../TSG-21.09/Druid/tasks/traffic_summary_log.json | 0 .../tasks/traffic_top_destination_ip_metrics_log.json | 0 .../2021/TSG-21.09/Druid/tasks/urls_proxy_hot.json | 0 .../2021/TSG-21.09/Druid/tasks/urls_security_hot.json | 0 .../upgrade/2021/TSG-21.09/Flink}/.gitkeep | 0 .../TSG-21.09/Galaxy-job-service/admin/logback.xml | 0 .../Galaxy-job-service/executor/galaxy-job-executor | 0 .../TSG-21.09/Galaxy-job-service/executor/logback.xml | 0 .../2021/TSG-21.09/Galaxy-qgw-service}/.gitkeep | 0 .../2021/TSG-21.09/Galaxy-qgw-service/log4j2.xml | 0 .../schema/active_defence_event.json | 0 .../Galaxy-qgw-service/schema/ck-filter.json | 0 .../Galaxy-qgw-service/schema/ck-queries-template.sql | 0 .../Galaxy-qgw-service/schema/columns_cluster.json | 0 .../Galaxy-qgw-service/schema/disks_cluster.json | 0 .../Galaxy-qgw-service/schema/dos_event.json | 0 .../Galaxy-qgw-service/schema/druid-filter.json | 0 .../schema/druid-queries-template.sql | 0 .../Galaxy-qgw-service/schema/engine-filter.json | 0 .../schema/engine-queries-template.sql | 0 .../Galaxy-qgw-service/schema/gtpc_record.json | 0 .../schema/interim_session_record.json | 0 .../Galaxy-qgw-service/schema/liveChart_interim.json | 0 .../Galaxy-qgw-service/schema/liveChart_session.json | 0 .../Galaxy-qgw-service/schema/meta_data.json | 0 .../Galaxy-qgw-service/schema/parts_cluster.json | 0 .../Galaxy-qgw-service/schema/processes.json | 0 .../Galaxy-qgw-service/schema/proxy_event.json | 0 .../schema/proxy_event_hits_log.json | 0 .../Galaxy-qgw-service/schema/public_schema_info.json | 0 .../Galaxy-qgw-service/schema/query_log.json | 0 .../Galaxy-qgw-service/schema/query_log_cluster.json | 0 .../Galaxy-qgw-service/schema/radius_onff_log.json | 0 .../Galaxy-qgw-service/schema/radius_record.json | 0 .../schema/sd_multi_access_cnt_feature.json | 0 .../Galaxy-qgw-service/schema/security_event.json | 0 .../schema/security_event_hits_log.json | 0 .../Galaxy-qgw-service/schema/session_record.json | 0 .../schema/session_record_common_client_ip.json | 0 .../schema/session_record_common_server_ip.json | 0 .../schema/session_record_http_domain.json | 0 .../schema/sys_packet_capture_event.json | 0 .../Galaxy-qgw-service/schema/sys_storage_log.json | 0 .../Galaxy-qgw-service/schema/tables_cluster.json | 0 .../Galaxy-qgw-service/schema/top_client_ip_log.json | 0 .../schema/top_external_host_log.json | 0 .../schema/top_internal_host_log.json | 0 .../Galaxy-qgw-service/schema/top_server_ip_log.json | 0 .../Galaxy-qgw-service/schema/top_urls_log.json | 0 .../Galaxy-qgw-service/schema/top_user_log.json | 0 .../schema/top_website_domain_log.json | 0 .../schema/traffic_app_stat_log.json | 0 .../schema/traffic_metrics_log.json | 0 .../schema/traffic_protocol_stat_log.json | 0 .../schema/traffic_summary_log.json | 0 .../traffic_top_destination_ip_metrics_log.json | 0 .../Galaxy-qgw-service/schema/transaction_record.json | 0 .../TSG-21.09/Galaxy-qgw-service/schema/version.json | 0 .../Galaxy-qgw-service/schema/voip_record.json | 0 .../upgrade/2021/TSG-21.09/Gohangout}/.gitkeep | 0 .../upgrade}/2021/TSG-21.09/Nginx/nginx.conf | 0 .../upgrade}/2021/TSG-21.09/Nginx/self-sign.crt | 0 .../upgrade}/2021/TSG-21.09/Nginx/self-sign.key | 0 .../2021/TSG-21.09/dos-detection/create_hbase_table | 0 .../upgrade}/2021/TSG-21.10/Clickhouse/add.sql | 0 .../upgrade}/2021/TSG-21.10/docker/daemon.json | 0 .../2021/TSG-21.10/druid/segments/druid_segments.sql | 0 .../2021-10-12T01_50_09.080Z/0_index.zip | Bin .../2021-10-12T01_50_00.558Z/0_index.zip | Bin .../TSG-21.10/druid/traffic_protocol_stat_log.json | 0 .../2021/TSG-21.10/druid/traffic_summary_log.json | 0 .../log-completion-schema-210928-flattenSpec.jar | Bin .../log-olap-analysis-schema-210928-flattenSpec.jar | Bin .../upgrade}/2021/TSG-21.10/job/xxl_job_info | 0 .../2021/TSG-21.10/node_exporter/docker-compose.yml | 0 .../2021/TSG-21.10/node_exporter/node-exporter.tar | Bin .../TSG-21.10/qgw/schema/active_defence_event.json | 0 .../upgrade}/2021/TSG-21.10/qgw/schema/ck-filter.json | 0 .../2021/TSG-21.10/qgw/schema/ck-queries-template.sql | 0 .../2021/TSG-21.10/qgw/schema/columns_cluster.json | 0 .../2021/TSG-21.10/qgw/schema/disks_cluster.json | 0 .../upgrade}/2021/TSG-21.10/qgw/schema/dos_event.json | 0 .../2021/TSG-21.10/qgw/schema/druid-filter.json | 0 .../TSG-21.10/qgw/schema/druid-queries-template.sql | 0 .../2021/TSG-21.10/qgw/schema/engine-filter.json | 0 .../TSG-21.10/qgw/schema/engine-queries-template.sql | 0 .../2021/TSG-21.10/qgw/schema/gtpc_record.json | 0 .../TSG-21.10/qgw/schema/interim_session_record.json | 0 .../2021/TSG-21.10/qgw/schema/liveChart_interim.json | 0 .../2021/TSG-21.10/qgw/schema/liveChart_session.json | 0 .../upgrade}/2021/TSG-21.10/qgw/schema/meta_data.json | 0 .../2021/TSG-21.10/qgw/schema/parts_cluster.json | 0 .../upgrade}/2021/TSG-21.10/qgw/schema/processes.json | 0 .../2021/TSG-21.10/qgw/schema/proxy_event.json | 0 .../TSG-21.10/qgw/schema/proxy_event_hits_log.json | 0 .../2021/TSG-21.10/qgw/schema/public_schema_info.json | 0 .../upgrade}/2021/TSG-21.10/qgw/schema/query_log.json | 0 .../2021/TSG-21.10/qgw/schema/query_log_cluster.json | 0 .../2021/TSG-21.10/qgw/schema/radius_onff_log.json | 0 .../2021/TSG-21.10/qgw/schema/radius_record.json | 0 .../2021/TSG-21.10/qgw/schema/security_event.json | 0 .../TSG-21.10/qgw/schema/security_event_hits_log.json | 0 .../2021/TSG-21.10/qgw/schema/session_record.json | 0 .../qgw/schema/session_record_common_client_ip.json | 0 .../qgw/schema/session_record_common_server_ip.json | 0 .../qgw/schema/session_record_http_domain.json | 0 .../qgw/schema/sys_packet_capture_event.json | 0 .../2021/TSG-21.10/qgw/schema/sys_storage_log.json | 0 .../2021/TSG-21.10/qgw/schema/tables_cluster.json | 0 .../2021/TSG-21.10/qgw/schema/top_client_ip_log.json | 0 .../TSG-21.10/qgw/schema/top_external_host_log.json | 0 .../TSG-21.10/qgw/schema/top_internal_host_log.json | 0 .../2021/TSG-21.10/qgw/schema/top_server_ip_log.json | 0 .../2021/TSG-21.10/qgw/schema/top_urls_log.json | 0 .../2021/TSG-21.10/qgw/schema/top_user_log.json | 0 .../TSG-21.10/qgw/schema/top_website_domain_log.json | 0 .../TSG-21.10/qgw/schema/traffic_app_stat_log.json | 0 .../TSG-21.10/qgw/schema/traffic_metrics_log.json | 0 .../qgw/schema/traffic_protocol_stat_log.json | 0 .../TSG-21.10/qgw/schema/traffic_summary_log.json | 0 .../traffic_top_destination_ip_metrics_log.json | 0 .../2021/TSG-21.10/qgw/schema/transaction_record.json | 0 .../upgrade}/2021/TSG-21.10/qgw/schema/version.json | 0 .../2021/TSG-21.10/qgw/schema/voip_record.json | 0 .../2021/TSG-21.11/Clickhouse/21.11add sql.txt | 0 .../2021/TSG-21.11/flink/cluster-flink-conf.yml | 0 .../upgrade}/2021/TSG-21.11/flink/docker-compose.yml | 0 .../2021/TSG-21.11/flink/standalone-flink.conf.yml | 0 .../upgrade}/2021/TSG-21.11/hbase/create_table | 0 .../upgrade}/2021/TSG-21.11/hbase/hbase-site.xml | 0 .../upgrade}/2021/TSG-21.11/job/xxl_job.sql | 0 .../upgrade}/2021/TSG-21.11/nginx/nginx.conf | 0 .../2021/TSG-21.11/qgw/galaxy-qgw-service.yml | 0 .../TSG-21.11/qgw/schema/active_defence_event.json | 0 .../upgrade}/2021/TSG-21.11/qgw/schema/ck-filter.json | 0 .../2021/TSG-21.11/qgw/schema/ck-queries-template.sql | 0 .../2021/TSG-21.11/qgw/schema/columns_cluster.json | 0 .../2021/TSG-21.11/qgw/schema/disks_cluster.json | 0 .../upgrade}/2021/TSG-21.11/qgw/schema/dos_event.json | 0 .../2021/TSG-21.11/qgw/schema/druid-filter.json | 0 .../TSG-21.11/qgw/schema/druid-queries-template.sql | 0 .../2021/TSG-21.11/qgw/schema/engine-filter.json | 0 .../TSG-21.11/qgw/schema/engine-queries-template.sql | 0 .../2021/TSG-21.11/qgw/schema/gtpc_record.json | 0 .../TSG-21.11/qgw/schema/interim_session_record.json | 0 .../2021/TSG-21.11/qgw/schema/liveChart_interim.json | 0 .../2021/TSG-21.11/qgw/schema/liveChart_session.json | 0 .../upgrade}/2021/TSG-21.11/qgw/schema/meta_data.json | 0 .../2021/TSG-21.11/qgw/schema/parts_cluster.json | 0 .../upgrade}/2021/TSG-21.11/qgw/schema/processes.json | 0 .../2021/TSG-21.11/qgw/schema/proxy_event.json | 0 .../TSG-21.11/qgw/schema/proxy_event_hits_log.json | 0 .../2021/TSG-21.11/qgw/schema/public_schema_info.json | 0 .../upgrade}/2021/TSG-21.11/qgw/schema/query_log.json | 0 .../2021/TSG-21.11/qgw/schema/query_log_cluster.json | 0 .../2021/TSG-21.11/qgw/schema/radius_onff_log.json | 0 .../2021/TSG-21.11/qgw/schema/radius_record.json | 0 .../qgw/schema/relation_account_framedip.json | 0 .../2021/TSG-21.11/qgw/schema/report_result.json | 0 .../2021/TSG-21.11/qgw/schema/security_event.json | 0 .../TSG-21.11/qgw/schema/security_event_hits_log.json | 0 .../2021/TSG-21.11/qgw/schema/session_record.json | 0 .../qgw/schema/session_record_common_client_ip.json | 0 .../qgw/schema/session_record_common_server_ip.json | 0 .../qgw/schema/session_record_http_domain.json | 0 .../qgw/schema/sys_packet_capture_event.json | 0 .../2021/TSG-21.11/qgw/schema/sys_storage_log.json | 0 .../2021/TSG-21.11/qgw/schema/tables_cluster.json | 0 .../2021/TSG-21.11/qgw/schema/top_client_ip_log.json | 0 .../TSG-21.11/qgw/schema/top_external_host_log.json | 0 .../TSG-21.11/qgw/schema/top_internal_host_log.json | 0 .../2021/TSG-21.11/qgw/schema/top_server_ip_log.json | 0 .../2021/TSG-21.11/qgw/schema/top_urls_log.json | 0 .../2021/TSG-21.11/qgw/schema/top_user_log.json | 0 .../TSG-21.11/qgw/schema/top_website_domain_log.json | 0 .../TSG-21.11/qgw/schema/traffic_app_stat_log.json | 0 .../TSG-21.11/qgw/schema/traffic_metrics_log.json | 0 .../qgw/schema/traffic_protocol_stat_log.json | 0 .../TSG-21.11/qgw/schema/traffic_summary_log.json | 0 .../traffic_top_destination_ip_metrics_log.json | 0 .../2021/TSG-21.11/qgw/schema/transaction_record.json | 0 .../upgrade}/2021/TSG-21.11/qgw/schema/version.json | 0 .../2021/TSG-21.11/qgw/schema/voip_record.json | 0 .../upgrade}/2021/TSG-21.11/record-21.11.txt | 0 .../upgrade}/2021/TSG-21.12/clickhouse/config.xml | 0 .../2021/TSG-21.12/clickhouse/update-ck-21.12.sql | 0 .../upgrade}/2021/TSG-21.12/druid/README.txt | 0 .../TSG-21.12/druid/cluster/traffic_metrics_log.zip | Bin .../TSG-21.12/druid/init_traffic_metrics_log.json | 0 .../2021/TSG-21.12/druid/log4j2.component.properties | 0 .../druid/standalone/traffic_metrics_log.zip | Bin .../2021/TSG-21.12/druid/traffic_app_stat_log.json | 0 .../2021/TSG-21.12/druid/traffic_metrics_log.json | 0 .../2021/TSG-21.12/druid/update-druid-21.12.sql | 0 .../upgrade}/2021/TSG-21.12/flink/config.sh | 0 .../2021/TSG-21.12/flink/log4j2.component.properties | 0 .../upgrade}/2021/TSG-21.12/hbase/update-hbase.txt | 0 .../upgrade}/2021/TSG-21.12/hbase/update-phoenix.txt | 0 .../upgrade}/2021/TSG-21.12/job/xxl_job.sql | 0 .../upgrade}/2021/TSG-21.12/kafka/add-topic.txt | 0 .../upgrade}/2021/TSG-21.12/nacos/README.txt | 0 .../upgrade}/2021/TSG-21.12/qgw/README.txt | 0 .../upgrade}/2021/TSG-21.12/qgw/backup_config.sh | 0 .../config/active_defence_event.json | 0 .../qgw/galaxy-qgw-service/config/ck-filter.json | 0 .../galaxy-qgw-service/config/ck-queries-template.sql | 0 .../galaxy-qgw-service/config/columns_cluster.json | 0 .../qgw/galaxy-qgw-service/config/disks_cluster.json | 0 .../qgw/galaxy-qgw-service/config/dos_event.json | 0 .../qgw/galaxy-qgw-service/config/druid-filter.json | 0 .../config/druid-queries-template.sql | 0 .../qgw/galaxy-qgw-service/config/engine-filter.json | 0 .../config/engine-queries-template.sql | 0 .../qgw/galaxy-qgw-service/config/gtpc_record.json | 0 .../qgw/galaxy-qgw-service/config/hbase-filter.json | 0 .../config/hbase-queries-template.sql | 0 .../config/interim_session_record.json | 0 .../qgw/galaxy-qgw-service/config/job_result.json | 0 .../galaxy-qgw-service/config/liveChart_interim.json | 0 .../galaxy-qgw-service/config/liveChart_session.json | 0 .../qgw/galaxy-qgw-service/config/meta_data.json | 0 .../qgw/galaxy-qgw-service/config/parts_cluster.json | 0 .../qgw/galaxy-qgw-service/config/processes.json | 0 .../qgw/galaxy-qgw-service/config/proxy_event.json | 0 .../config/proxy_event_hits_log.json | 0 .../galaxy-qgw-service/config/public_schema_info.json | 0 .../qgw/galaxy-qgw-service/config/query_log.json | 0 .../galaxy-qgw-service/config/query_log_cluster.json | 0 .../galaxy-qgw-service/config/radius_onff_log.json | 0 .../qgw/galaxy-qgw-service/config/radius_record.json | 0 .../config/recommendation_app_cip.json | 0 .../config/relation_account_framedip.json | 0 .../qgw/galaxy-qgw-service/config/report_result.json | 0 .../qgw/galaxy-qgw-service/config/security_event.json | 0 .../config/security_event_hits_log.json | 0 .../qgw/galaxy-qgw-service/config/session_record.json | 0 .../config/session_record_common_client_ip.json | 0 .../config/session_record_common_server_ip.json | 0 .../config/session_record_http_domain.json | 0 .../config/sys_packet_capture_event.json | 0 .../galaxy-qgw-service/config/sys_storage_log.json | 0 .../qgw/galaxy-qgw-service/config/tables_cluster.json | 0 .../galaxy-qgw-service/config/top_client_ip_log.json | 0 .../config/top_external_host_log.json | 0 .../config/top_internal_host_log.json | 0 .../galaxy-qgw-service/config/top_server_ip_log.json | 0 .../qgw/galaxy-qgw-service/config/top_urls_log.json | 0 .../qgw/galaxy-qgw-service/config/top_user_log.json | 0 .../config/top_website_domain_log.json | 0 .../config/traffic_app_stat_log.json | 0 .../config/traffic_metrics_log.json | 0 .../config/traffic_protocol_stat_log.json | 0 .../config/traffic_summary_log.json | 0 .../traffic_top_destination_ip_metrics_log.json | 0 .../galaxy-qgw-service/config/transaction_record.json | 0 .../qgw/galaxy-qgw-service/config/version.json | 0 .../qgw/galaxy-qgw-service/config/voip_record.json | 0 .../upgrade}/2021/TSG-21.12/qgw/push_config.sh | 0 .../2021/TSG-21.12/qgw/update-galaxy-qgw-service.yml | 0 .../upgrade}/2021/TSG-21.12/record-21.12.txt | 0 .../2021/TSG-21.12/spark/update-spark-conf.txt | 0 .../upgrade}/2021/TSG-21.12/topology/README.txt | 0 .../config/RADIUS-RELATIONSHIP-HBASE-V2 | 0 .../topology/account-framedip-Hbase/start.sh | 0 .../TSG-21.12/topology/account-framedip-Hbase/stop.sh | 0 .../TSG-21.12/topology/dos-detection/update-config | 0 .../topology/flink-top/kafka-flinksql-top.sql | 0 .../vpn-recommend/config/RECOMMENDATION-APP-CIP | 0 .../2021/TSG-21.12/topology/vpn-recommend/start.sh | 0 .../2021/TSG-21.12/topology/vpn-recommend/stop.sh | 0 .../upgrade}/2022/TSG-22.01/README.txt | 0 .../2022/TSG-22.01/clickhouse/update-01-ck.sql | 0 .../upgrade}/2022/TSG-22.01/docker/jdk.yml | 0 .../upgrade}/2022/TSG-22.01/gohangout/README.txt | 0 .../upgrade}/2022/TSG-22.01/kafka/add-topic.txt | 0 .../livechart/LIVE-CHARTS_INTERIM-SESSION-RECORD | 0 .../topology/livechart/LIVE-CHARTS_SESSION-RECORD | 0 .../2022/TSG-22.02/clickhouse/update-02-ck.sql | 0 .../upgrade}/2022/TSG-22.02/hbase/update-phoenix.txt | 0 .../upgrade}/2022/TSG-22.02/hos/create_bucket.txt | 0 .../upgrade}/2022/TSG-22.02/job/add_job.pdf | Bin .../upgrade}/2022/TSG-22.02/job/docker-compose.yml | 0 .../upgrade}/2022/TSG-22.02/job/update-02-job.sql | 0 .../2022/TSG-22.02/qgw/galaxy-qgw-service.yml | 0 .../2022/TSG-22.02/topology/completion/readme.md | 0 .../2022/TSG-22.02/topology/dos-detection/readme.md | 0 .../upgrade}/2022/TSG-22.03/clickhouse/ck_monitor.sh | 0 .../2022/TSG-22.03/clickhouse/update-03-ck.sql | 0 .../upgrade}/2022/TSG-22.03/job/admin/logback.xml | 0 .../upgrade}/2022/TSG-22.03/job/executor/logback.xml | 0 .../upgrade}/2022/TSG-22.04/Galaxy_22.04更新文档.docx | Bin .../2022/TSG-22.04/Galaxy_22.04第二次更新文档.docx | Bin .../2022/TSG-22.04/druid/cluster/segments_22_04.zip | Bin .../TSG-22.04/druid/standalone/segments_22_04.zip | Bin .../2022/TSG-22.04/druid/top_client_ip_log.json | 0 .../2022/TSG-22.04/druid/top_external_host_log.json | 0 .../2022/TSG-22.04/druid/top_internal_host_log.json | 0 .../2022/TSG-22.04/druid/top_server_ip_log.json | 0 .../upgrade}/2022/TSG-22.04/druid/top_user_log.json | 0 .../2022/TSG-22.04/druid/top_website_domain_log.json | 0 .../2022/TSG-22.04/druid/traffic_app_stat_log.json | 0 .../config/ETL-ACTIVE-DEFENCE-EVENT-COMPLETED | 0 .../flink/completion/config/ETL-GTPC-RECORD-COMPLETED | 0 .../config/ETL-INTERIM-SESSION-RECORD-COMPLETED | 0 .../flink/completion/config/ETL-PROXY-EVENT-COMPLETED | 0 .../completion/config/ETL-RADIUS-RECORD-COMPLETED | 0 .../completion/config/ETL-SECURITY-EVENT-COMPLETED | 0 .../completion/config/ETL-SESSION-RECORD-COMPLETED | 0 .../config/ETL-SYS-PACKET-CAPTURE-COMPLETED | 0 .../config/ETL-TRANSACTION-RECORD-COMPLETED | 0 .../flink/completion/config/ETL-VOIP-RECORD-COMPLETED | 0 .../upgrade}/2022/TSG-22.04/flink/completion/start.sh | 0 .../2022/TSG-22.04/flink/kafka-flinksql-top.sql | 0 .../config/LIVE-CHARTS_INTERIM-SESSION-RECORD | 0 .../livecharts/config/LIVE-CHARTS_SESSION-RECORD | 0 .../upgrade}/2022/TSG-22.04/flink/livecharts/start.sh | 0 .../2022/TSG-22.04/flink/radiusOnOff/start.sh | 0 .../2022/TSG-22.04/flink/voipRelation/start.sh | 0 .../upgrade}/2022/TSG-22.04/qgw/config/ck-filter.json | 0 .../2022/TSG-22.04/qgw/config/ck-queries-template.sql | 0 .../2022/TSG-22.04/qgw/config/druid-filter.json | 0 .../TSG-22.04/qgw/config/druid-queries-template.sql | 0 .../2022/TSG-22.04/qgw/config/engine-filter.json | 0 .../TSG-22.04/qgw/config/engine-queries-template.sql | 0 .../2022/TSG-22.04/qgw/config/hbase-filter.json | 0 .../TSG-22.04/qgw/config/hbase-queries-template.sql | 0 .../2022/TSG-22.04/qgw/config/job_result.json | 0 .../TSG-22.04/qgw/config/proxy_event_hits_log.json | 0 .../TSG-22.04/qgw/config/recommendation_app_cip.json | 0 .../qgw/config/relation_account_framedip.json | 0 .../2022/TSG-22.04/qgw/config/report_result.json | 0 .../2022/TSG-22.04/qgw/config/security_event.json | 0 .../TSG-22.04/qgw/config/security_event_hits_log.json | 0 .../2022/TSG-22.04/qgw/config/session_record.json | 0 .../2022/TSG-22.04/qgw/config/sys_storage_log.json | 0 .../2022/TSG-22.04/qgw/config/top_client_ip_log.json | 0 .../TSG-22.04/qgw/config/top_external_host_log.json | 0 .../TSG-22.04/qgw/config/top_internal_host_log.json | 0 .../2022/TSG-22.04/qgw/config/top_server_ip_log.json | 0 .../2022/TSG-22.04/qgw/config/top_urls_log.json | 0 .../2022/TSG-22.04/qgw/config/top_user_log.json | 0 .../TSG-22.04/qgw/config/top_website_domain_log.json | 0 .../TSG-22.04/qgw/config/traffic_app_stat_log.json | 0 .../TSG-22.04/qgw/config/traffic_metrics_log.json | 0 .../qgw/config/traffic_protocol_stat_log.json | 0 .../TSG-22.04/qgw/config/traffic_summary_log.json | 0 .../traffic_top_destination_ip_metrics_log.json | 0 .../upgrade}/2022/TSG-22.05/Galaxy_22.05更新文档.docx | Bin .../2022/TSG-22.05/clickhouse/update-05-ck.sql | 0 .../upgrade}/2022/TSG-22.05/job/mmdb-perl-built-in.pl | 0 .../2022/TSG-22.05/job/mmdb-perl-user-defined.pl | 0 .../TSG-22.05/qgw/config/active_defence_event.json | 0 .../2022/TSG-22.05/qgw/config/assessment_event.json | 0 .../upgrade}/2022/TSG-22.05/qgw/config/dos_event.json | 0 .../upgrade}/2022/TSG-22.05/qgw/config/es-filter.json | 0 .../2022/TSG-22.05/qgw/config/es-queries-template.sql | 0 .../2022/TSG-22.05/qgw/config/gtpc_record.json | 0 .../TSG-22.05/qgw/config/interim_session_record.json | 0 .../2022/TSG-22.05/qgw/config/proxy_event.json | 0 .../2022/TSG-22.05/qgw/config/public_schema_info.json | 0 .../2022/TSG-22.05/qgw/config/radius_onff_log.json | 0 .../2022/TSG-22.05/qgw/config/radius_record.json | 0 .../2022/TSG-22.05/qgw/config/security_event.json | 0 .../2022/TSG-22.05/qgw/config/session_record.json | 0 .../qgw/config/session_record_common_client_ip.json | 0 .../qgw/config/session_record_common_server_ip.json | 0 .../qgw/config/session_record_http_domain.json | 0 .../qgw/config/sys_packet_capture_event.json | 0 .../2022/TSG-22.05/qgw/config/transaction_record.json | 0 .../2022/TSG-22.05/qgw/config/voip_record.json | 0 .../2022/TSG-22.06/clickhouse/update-06-ck.sql | 0 .../upgrade}/2022/TSG-22.08/Galaxy_22.08更新文档.docx | Bin .../2022/TSG-22.08/hbase/upgrade_alter_hbase_2208.sh | 0 .../2022/TSG-22.08/hbase/upgrade_phoenix_2208.sh | 0 .../2022/TSG-22.08/hbase/upgrade_table_hbase_2208.sh | 0 .../2022/TSG-22.09/clickhouse/update-09-ck.sql | 0 .../2022/TSG-22.10/clickhouse/update-22.10-ck.sql | 0 .../upgrade}/2022/TSG-22.10/hbase/update.txt | 0 .../upgrade}/2022/TSG-22.10/phoenix/update.sql | 0 .../2022/TSG-22.11/clickhouse/update-22.11-ck.sql | 0 .../2022/TSG-22.12/clickhouse/update-22.12-ck.sql | 0 .../2023/TSG-23.01/clickhouse/update-23.01-ck.sql | 0 .../2023/TSG-23.02/clickhouse/drop-tmp-23.02-ck.sql | 0 .../2023/TSG-23.02/clickhouse/rename-old-23.02-ck.sql | 0 .../2023/TSG-23.02/clickhouse/rename-tmp-23.02-ck.sql | 0 .../2023/TSG-23.02/clickhouse/update-23.02-ck.sql | 0 .../upgrade}/2023/TSG-23.02/hbase/hbase-site.xml | 0 .../2023/TSG-23.02/hbase/update-2302-hbase.sql | 0 .../2023/TSG-23.02/phoenix/update-2302-phoenix.sql | 0 .../upgrade/2023/TSG-23.03/clickhouse}/.gitkeep | 0 .../2023/TSG-23.03/clickhouse/update-23.03-ck.sql | 0 .../2023/TSG-23.04/clickhouse/update-23.04-ck.sql | 0 .../2023/TSG-23.05/clickhouse/update-23.05-ck.sql | 0 .../2023/TSG-23.06/clickhouse/update-23.06-ck.sql | 0 .../upgrade}/2023/TSG-23.06/hbase/update.txt | 0 .../2023/TSG-23.07/clickhouse/update-23.07-ck.sql | 0 .../2023/TSG-23.08/clickhouse/update-23.08-ck.sql | 0 .../2023/TSG-23.09/clickhouse/update-23.09-ck.sql | 0 .../2023/TSG-23.10/clickhouse/update-23.10-ck.sql | 0 .../upgrade}/2023/TSG-23.11/hbase/hbase-site.xml | 0 .../2023/TSG-23.11/hos/galaxy-hos-service.yml | 0 .../upgrade}/2023/TSG-23.12/hbase/hbase-site.xml | 0 .../2023/TSG-23.12/hbase/update-hbase-23.12.txt | 0 .../2023/TSG-23.12/hos/galaxy-hos-service.yml | 0 .../2023/TSG-23.12/phoenix/update-phoenix-23.12.sql | 0 .../upgrade}/TSG-24.01/hbase/update-hbase-24.01.txt | 0 .../upgrade}/TSG-24.01/hos/galaxy-hos-service.yml | 0 .../TSG-24.01/phoenix/update-phoenix-24.01.sql | 0 .../upgrade}/TSG-24.02.1/Groot-Stream/README.md | 0 .../Groot-Stream/etl_session_record_kafka_to_kafka | 0 .../TSG-24.02.1/Groot-Stream/grootstream.yaml | 0 .../session_record_processed_kafka_to_clickhouse | 0 .../upgrade}/TSG-24.02.1/Groot-Stream/udf.plugins | 0 .../Groot-Stream/集中式/dos_event_kafka_to_clickhouse | 0 .../集中式/etl_proxy_event_kafka_to_clickhouse | 0 .../集中式/etl_session_record_kafka_to_clickhouse | 0 .../集中式/etl_transaction_record_kafka_to_clickhouse | 0 .../集中式/etl_voip_record_kafka_to_clickhouse | 0 .../TSG-24.02/clickhouse/Clickhouse_TSG_建表语句.sql | 0 .../upgrade/TSG-24.02/clickhouse/check-24.02.sql | 38 +- .../upgrade}/TSG-24.02/clickhouse/update-24.02-ck.sql | 2036 ++++---- .../upgrade}/TSG-24.03/Groot-Stream/README.md | 0 .../upgrade}/TSG-24.03/Groot-Stream/grootstream.yaml | 0 .../Groot-Stream/集中式/dos_event_kafka_to_clickhouse | 0 .../集中式/etl_proxy_event_kafka_to_clickhouse | 0 .../集中式/etl_session_record_kafka_to_clickhouse | 0 .../集中式/etl_transaction_record_kafka_to_clickhouse | 0 .../集中式/etl_voip_record_kafka_to_clickhouse | 0 .../TSG-24.04/clickhouse/Clickhouse_TSG_建表语句.sql | 48 +- .../upgrade}/TSG-24.04/clickhouse/check-24.04.sql | 0 .../upgrade}/TSG-24.04/clickhouse/update-24.04-ck.sql | 0 .../etl_datapath_telemetry_record_kafka_to_clickhouse | 0 .../TSG-24.05/clickhouse/Clickhouse_TSG_建表语句.sql | 0 .../upgrade}/TSG-24.05/clickhouse/check-24.05.sql | 0 .../upgrade}/TSG-24.05/clickhouse/update-24.05-ck.sql | 0 690 files changed, 5478 insertions(+), 5478 deletions(-) delete mode 100644 TSG发布版本更新记录/2021/TSG-21.09/Gohangout/.gitkeep delete mode 100644 TSG发布版本更新记录/2023/TSG-23.03/clickhouse/.gitkeep rename Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql => cyber_narrator/installation/clickhouse/cn_clickhouse_ddl.sql (96%) rename Clickhouse最新全量建表语句/Clickhouse_CN_校验sql.sql => cyber_narrator/installation/clickhouse/cn_clickhouse_ddl_check.sql (100%) rename Clickhouse最新全量建表语句/Clickhouse_CN_NFSP建表语句.sql => cyber_narrator/installation/clickhouse/cn_nfsp_clickhouse_ddl.sql (100%) rename {Groot-Stream 最新全量配置模版/CN => cyber_narrator/installation/groot_stream}/README.md (100%) rename {CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot => cyber_narrator/installation/groot_stream}/etl_session_record_processed_kafka_to_cn_kafka (100%) rename {CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot => cyber_narrator/installation/groot_stream}/grootstream.yaml (100%) rename {Groot-Stream 最新全量配置模版/CN => cyber_narrator/installation/groot_stream}/udf.plugins (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.03.rc1/clickhouse/update-03.rc1-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.05/clickhouse/update-05-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/clickhouse/update-09-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_cn_record.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_application_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_asn_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_domain_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_http_host_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_idc_renter_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_protocol_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_region_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ssl_sni_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_cn_record.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_application_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_asn_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_domain_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_http_host_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_idc_renter_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_ip_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_protocol_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_region_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/conf/k2ck_metric_ssl_sni_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.09/gohangout/start_all.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/clickhouse/update-10-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qname_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qtype_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rcode_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_a_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_aaaa_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_cname_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_server_ip_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_link_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qname_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qtype_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rcode_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_a_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_aaaa_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_cname_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_server_ip_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/conf/k2ck_metric_link_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2022/CN-22.10/gohangout/start_all.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.02/.gitkeep (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.02/clickhouse/.gitkeep (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.02/clickhouse/update-02-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.06/.gitkeep (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.06/clickhouse/.gitkeep (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.06/clickhouse/update-23.06-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.07/clickhouse/update-23.07-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.09/clickhouse/update-23.09-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_dynamic_attribute_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_relation_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.09/gohangout/conf/k2ck_metric_ip_dynamic_attribute_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.09/gohangout/conf/k2ck_metric_relation_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.09/gohangout/start_all.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.10/clickhouse/update-23.10-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.10/gohangout/.gitkeep (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.10/gohangout/bin/ghoStart/start_gohangout_k2ck_security_event_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.10/gohangout/conf/k2ck_security_event_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.10/gohangout/start_all.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.12/clickhouse/update-23.12-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.12/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_subscriber_app_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.12/gohangout/conf/k2ck_metric_subscriber_app_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2023/CN-23.12/gohangout/start_all.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.01.rc1/CN/groot/README.md (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.01.rc1/CN/groot/etl_session_record_kafka_to_cn_kafka (100%) rename {Groot-Stream 最新全量配置模版/CN => cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot}/etl_session_record_processed_kafka_to_cn_kafka (100%) rename {Groot-Stream 最新全量配置模版/CN => cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot}/grootstream.yaml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.01.rc1/CN/groot/udf.plugins (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.01.rc1/clickhouse/check-24.01.rc1-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.01.rc1/clickhouse/update-24.01.rc1-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.03/clickhouse/check-24.03-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.03/clickhouse/update-24.03-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.03/gohangout/bin/ghoStart/start_gohangout_k2ck_location_subscriber_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.03/gohangout/conf/k2ck_location_subscriber_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.03/gohangout/start_all.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/CN/README.md (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/CN/etl_session_record_kafka_to_cn_kafka (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/CN/grootstream.yaml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/CN/udf.plugins (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/clickhouse/check-24.04-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/clickhouse/update-24.04-ck.sql (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_cn_ip_dynamic_attribute_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_domain_ip_app_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_subscriber_app_cn.sh (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/gohangout/conf/k2ck_raw_cn_ip_dynamic_attribute_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_domain_ip_app_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_subscriber_app_cn.yml (100%) rename {CN发布版本更新记录 => cyber_narrator/upgrade}/2024/CN-24.04/start_all.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/01_cat_old_table_row_count.sql (98%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/01_rename_old_table.sql (98%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/02_init_new_table.sql (100%) rename TSG发布版本更新记录/TSG-24.02/clickhouse/check-24.02.sql => tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/03_check.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/04_create_table_2307_to_2402_view.sql (97%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/05_drop_table_2307_to_2402_view.sql (98%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/06_drop_old_table.sql (98%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/ck表升级步骤.md (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/migrate_table_2402/01_send_migrate_table_scripts.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/migrate_table_2402/02_start_migrate_table.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/migrate_table_2402/03_monitor_migrate_table.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/migrate_table_2402/iplist.txt (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/migrate_table_2402/migrate_local_table_to_2402.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2307版本到2402版本升级操作/migrate_table_2402/start_migrate_local_table_to_2402.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/01_create_table_2401.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/02_create_table_2310_to_2401_view.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/03_rename_table.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/04_init_new_table.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/05_check.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/ck表升级步骤.md (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/migrate_table_2401/01_send_migrate_table_scripts.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/migrate_table_2401/02_start_migrate_table.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/migrate_table_2401/03_monitor_migrate_table.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/migrate_table_2401/iplist.txt (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/migrate_table_2401/migrate_local_table_to_2401.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG 2310版本到2401版本升级操作/migrate_table_2401/start_migrate_local_table_to_2401.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/22.11_LTS_建表语句/.gitkeep (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/22.11_LTS_建表语句/create_ck_table.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/22.11_LTS_建表语句/update.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-07.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-08.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-07.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-08.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/sql文件同步自动化检测方案/.gitkeep (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/sql文件同步自动化检测方案/sqlFilesAutoDetect.py (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/sql文件同步自动化检测方案/sql文件同步自动化检测检测原理及执行效果.doc (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/system.sql (100%) rename Clickhouse最新全量建表语句/Clickhouse_TSG_建表语句.sql => tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl.sql (100%) rename Clickhouse最新全量建表语句/Clickhouse_TSG_校验sql.sql => tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl_check.sql (100%) rename Clickhouse最新全量建表语句/Clickhouse-dll.sql => tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl_deprecated.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/性能测试脚本/ck_query.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/性能测试脚本/query-new.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/性能测试脚本/query-old.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/数据迁移脚本/iplist.txt (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/数据迁移脚本/mig.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/江苏项目/js-tsg-2402-create-table.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/cat_tmp_old_table_row_count.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/cat_v3_old_table_row_count.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/check_tsg_galaxy_tmp_24_02_table.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/init_tsg_galaxy_tmp_24_02_table.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/migrate_table_2402/01_send_migrate_table_scripts.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/migrate_table_2402/02_start_migrate_table.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/migrate_table_2402/03_monitor_migrate_table.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/migrate_table_2402/iplist.txt (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/migrate_table_2402/migrate_local_table_to_2402.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/migrate_table_2402/start_migrate_local_table_to_2402.sh (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/move_tmp_2307_to_tmp_2307_old.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/move_v3_to_tmp.sql (100%) rename {Clickhouse最新全量建表语句 => tsg_olap/installation/clickhouse}/通用跨版本迁移数据步骤/通用跨版本迁移数据步骤.md (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/README.md (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/etl_session_record_kafka_to_kafka (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/grootstream.yaml (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/session_record_processed_kafka_to_clickhouse (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/udf.plugins (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/集中式/dos_event_kafka_to_clickhouse (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/集中式/etl_datapath_telemetry_record_kafka_to_clickhouse (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/集中式/etl_proxy_event_kafka_to_clickhouse (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/集中式/etl_session_record_kafka_to_clickhouse (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/集中式/etl_transaction_record_kafka_to_clickhouse (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/installation/groot_stream}/集中式/etl_voip_record_kafka_to_clickhouse (100%) rename {HBase最新建表语句 => tsg_olap/installation/hbase}/HBase建表语句_TSG (100%) rename {HBase最新建表语句 => tsg_olap/installation/hbase}/Phoenix建表语句_TSG.sql (100%) rename {Groot-Stream 最新全量配置模版 => tsg_olap/upgrade/2021/2021-02-01}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/2021-02-01/Release.md (100%) rename {Groot-Stream 最新全量配置模版/TSG => tsg_olap/upgrade/2021/2021-02-01/clickhouse}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/2021-02-01/clickhouse/20210201-5448-upsql.txt (100%) rename {TSG发布版本更新记录/2021/2021-02-01 => tsg_olap/upgrade/2021/2021-02-01/galaxy-qgw-service}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/2021-02-01/galaxy-qgw-service/210201_新增ISN.zip (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.03/Clickhouse/add_column.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.03/README.md (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.03/查询引擎/connection_record_log.avsc (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.03/查询引擎/proxy_event_log.avsc (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.03/查询引擎/radius_record_log.avsc (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.03/查询引擎/security_event_log.avsc (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.03/查询引擎/version.json (100%) rename {TSG发布版本更新记录/2021/2021-02-01/clickhouse => tsg_olap/upgrade/2021/TSG-21.04}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.04/clickhouse/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.04/clickhouse/add_column.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.04/clickhouse/drop_cluster.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.04/clickhouse/drop_query.sql (100%) rename {TSG发布版本更新记录/2021/2021-02-01/galaxy-qgw-service => tsg_olap/upgrade/2021/TSG-21.05}/.gitkeep (100%) rename {TSG发布版本更新记录/2021/TSG-21.04 => tsg_olap/upgrade/2021/TSG-21.05/Clickhouse}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/add_table.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/change_colume_type_cluster.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/change_colume_type_query.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/connection_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/proxy_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/radius_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/security_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/sys_packet_capture_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.05/Clickhouse/voip_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/connection_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/createAllTables/create_ck_table.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/createAllTables/dll.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/gtpc_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/live_session_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/proxy_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/radius_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/security_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/sys_packet_capture_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/transaction_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.06/clickhouse/voip_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/active_defence_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/connection_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/gtpc_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/live_session_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/proxy_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/radius_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/security_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/sys_packet_capture_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/transaction_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.07/clickhouse/voip_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/ck_column_2108_gal72.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/ck_column_2108_gal74.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/connection_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/create_dos_tables.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/gtpc_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/live_session_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/proxy_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/radius_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/security_event_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/sys_packet_capture_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/transaction_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/clickhouse/voip_record_log.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/druid/traffic_destination_ip_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/druid/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/gohangout/bin/ghoStart/start_gohangout_k2ck_dos_event_log_tsgv3.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/gohangout/conf/k2ck_dos_event_log_tsgv3.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.08/gohangout/start_all.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Clickhouse/bloom_filter.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Clickhouse/rename.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/proxy_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/security_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/sys_storage_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/top_client_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/top_external_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/top_internal_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/top_server_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/top_urls_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/top_user_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/top_website_domain_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/traffic_protocol_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/traffic_top_destination_ip_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/urls_proxy_hot.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Druid/tasks/urls_security_hot.json (100%) rename {TSG发布版本更新记录/2021/TSG-21.05 => tsg_olap/upgrade/2021/TSG-21.09/Flink}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-job-service/admin/logback.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-job-service/executor/galaxy-job-executor (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-job-service/executor/logback.xml (100%) rename {TSG发布版本更新记录/2021/TSG-21.05/Clickhouse => tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/log4j2.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/active_defence_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/columns_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/disks_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/dos_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/gtpc_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/interim_session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_interim.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_session.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/meta_data.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/parts_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/processes.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/public_schema_info.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_onff_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/sd_multi_access_cnt_feature.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_client_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_server_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_http_domain.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_packet_capture_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_storage_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/tables_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/top_client_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/top_external_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/top_internal_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/top_server_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/top_urls_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/top_user_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/top_website_domain_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_protocol_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_top_destination_ip_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/transaction_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/version.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Galaxy-qgw-service/schema/voip_record.json (100%) rename {TSG发布版本更新记录/2021/TSG-21.09/Flink => tsg_olap/upgrade/2021/TSG-21.09/Gohangout}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Nginx/nginx.conf (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Nginx/self-sign.crt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/Nginx/self-sign.key (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.09/dos-detection/create_hbase_table (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/Clickhouse/add.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/docker/daemon.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/druid/segments/druid_segments.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/druid/segments/traffic_protocol_stat_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_09.080Z/0_index.zip (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/druid/segments/traffic_summary_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_00.558Z/0_index.zip (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/druid/traffic_protocol_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/druid/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/flink/completion/log-completion-schema-210928-flattenSpec.jar (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/flink/livecharts/log-olap-analysis-schema-210928-flattenSpec.jar (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/job/xxl_job_info (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/node_exporter/docker-compose.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/node_exporter/node-exporter.tar (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/active_defence_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/ck-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/ck-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/columns_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/disks_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/dos_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/druid-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/druid-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/engine-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/engine-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/gtpc_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/interim_session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/liveChart_interim.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/liveChart_session.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/meta_data.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/parts_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/processes.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/proxy_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/proxy_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/public_schema_info.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/query_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/query_log_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/radius_onff_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/radius_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/security_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/security_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/session_record_common_client_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/session_record_common_server_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/session_record_http_domain.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/sys_packet_capture_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/sys_storage_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/tables_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/top_client_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/top_external_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/top_internal_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/top_server_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/top_urls_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/top_user_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/top_website_domain_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/traffic_protocol_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/traffic_top_destination_ip_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/transaction_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/version.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.10/qgw/schema/voip_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/Clickhouse/21.11add sql.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/flink/cluster-flink-conf.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/flink/docker-compose.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/flink/standalone-flink.conf.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/hbase/create_table (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/hbase/hbase-site.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/job/xxl_job.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/nginx/nginx.conf (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/galaxy-qgw-service.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/active_defence_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/ck-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/ck-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/columns_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/disks_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/dos_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/druid-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/druid-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/engine-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/engine-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/gtpc_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/interim_session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/liveChart_interim.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/liveChart_session.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/meta_data.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/parts_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/processes.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/proxy_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/proxy_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/public_schema_info.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/query_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/query_log_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/radius_onff_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/radius_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/relation_account_framedip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/report_result.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/security_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/security_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/session_record_common_client_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/session_record_common_server_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/session_record_http_domain.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/sys_packet_capture_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/sys_storage_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/tables_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/top_client_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/top_external_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/top_internal_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/top_server_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/top_urls_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/top_user_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/top_website_domain_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/traffic_protocol_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/traffic_top_destination_ip_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/transaction_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/version.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/qgw/schema/voip_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.11/record-21.11.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/clickhouse/config.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/clickhouse/update-ck-21.12.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/README.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/cluster/traffic_metrics_log.zip (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/init_traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/log4j2.component.properties (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/standalone/traffic_metrics_log.zip (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/druid/update-druid-21.12.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/flink/config.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/flink/log4j2.component.properties (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/hbase/update-hbase.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/hbase/update-phoenix.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/job/xxl_job.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/kafka/add-topic.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/nacos/README.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/README.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/backup_config.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/active_defence_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/columns_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/disks_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/dos_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/gtpc_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/interim_session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/job_result.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_interim.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_session.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/meta_data.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/parts_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/processes.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/public_schema_info.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_onff_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/recommendation_app_cip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/relation_account_framedip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/report_result.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_client_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_server_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_http_domain.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_packet_capture_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_storage_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/tables_cluster.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_client_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_external_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_internal_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_server_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_urls_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_user_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_website_domain_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_protocol_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_top_destination_ip_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/transaction_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/version.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/galaxy-qgw-service/config/voip_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/push_config.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/qgw/update-galaxy-qgw-service.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/record-21.12.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/spark/update-spark-conf.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/README.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/account-framedip-Hbase/config/RADIUS-RELATIONSHIP-HBASE-V2 (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/account-framedip-Hbase/start.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/account-framedip-Hbase/stop.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/dos-detection/update-config (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/flink-top/kafka-flinksql-top.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/vpn-recommend/config/RECOMMENDATION-APP-CIP (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/vpn-recommend/start.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2021/TSG-21.12/topology/vpn-recommend/stop.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.01/README.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.01/clickhouse/update-01-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.01/docker/jdk.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.01/gohangout/README.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.01/kafka/add-topic.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_INTERIM-SESSION-RECORD (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_SESSION-RECORD (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/clickhouse/update-02-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/hbase/update-phoenix.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/hos/create_bucket.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/job/add_job.pdf (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/job/docker-compose.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/job/update-02-job.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/qgw/galaxy-qgw-service.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/topology/completion/readme.md (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.02/topology/dos-detection/readme.md (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.03/clickhouse/ck_monitor.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.03/clickhouse/update-03-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.03/job/admin/logback.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.03/job/executor/logback.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/Galaxy_22.04更新文档.docx (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/Galaxy_22.04第二次更新文档.docx (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/cluster/segments_22_04.zip (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/standalone/segments_22_04.zip (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/top_client_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/top_external_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/top_internal_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/top_server_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/top_user_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/top_website_domain_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/druid/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-ACTIVE-DEFENCE-EVENT-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-GTPC-RECORD-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-INTERIM-SESSION-RECORD-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-PROXY-EVENT-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-RADIUS-RECORD-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-SECURITY-EVENT-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-SESSION-RECORD-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-SYS-PACKET-CAPTURE-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-TRANSACTION-RECORD-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/config/ETL-VOIP-RECORD-COMPLETED (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/completion/start.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/kafka-flinksql-top.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_INTERIM-SESSION-RECORD (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_SESSION-RECORD (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/livecharts/start.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/radiusOnOff/start.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/flink/voipRelation/start.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/ck-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/ck-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/druid-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/druid-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/engine-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/engine-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/hbase-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/hbase-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/job_result.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/proxy_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/recommendation_app_cip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/relation_account_framedip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/report_result.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/security_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/security_event_hits_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/sys_storage_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/top_client_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/top_external_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/top_internal_host_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/top_server_ip_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/top_urls_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/top_user_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/top_website_domain_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/traffic_app_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/traffic_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/traffic_protocol_stat_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/traffic_summary_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.04/qgw/config/traffic_top_destination_ip_metrics_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/Galaxy_22.05更新文档.docx (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/clickhouse/update-05-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/job/mmdb-perl-built-in.pl (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/job/mmdb-perl-user-defined.pl (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/active_defence_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/assessment_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/dos_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/es-filter.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/es-queries-template.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/gtpc_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/interim_session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/proxy_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/public_schema_info.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/radius_onff_log.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/radius_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/security_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/session_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/session_record_common_client_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/session_record_common_server_ip.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/session_record_http_domain.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/sys_packet_capture_event.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/transaction_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.05/qgw/config/voip_record.json (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.06/clickhouse/update-06-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.08/Galaxy_22.08更新文档.docx (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.08/hbase/upgrade_alter_hbase_2208.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.08/hbase/upgrade_phoenix_2208.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.08/hbase/upgrade_table_hbase_2208.sh (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.09/clickhouse/update-09-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.10/clickhouse/update-22.10-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.10/hbase/update.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.10/phoenix/update.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.11/clickhouse/update-22.11-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2022/TSG-22.12/clickhouse/update-22.12-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.01/clickhouse/update-23.01-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.02/clickhouse/drop-tmp-23.02-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.02/clickhouse/rename-old-23.02-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.02/clickhouse/rename-tmp-23.02-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.02/clickhouse/update-23.02-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.02/hbase/hbase-site.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.02/hbase/update-2302-hbase.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.02/phoenix/update-2302-phoenix.sql (100%) rename {TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service => tsg_olap/upgrade/2023/TSG-23.03/clickhouse}/.gitkeep (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.03/clickhouse/update-23.03-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.04/clickhouse/update-23.04-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.05/clickhouse/update-23.05-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.06/clickhouse/update-23.06-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.06/hbase/update.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.07/clickhouse/update-23.07-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.08/clickhouse/update-23.08-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.09/clickhouse/update-23.09-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.10/clickhouse/update-23.10-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.11/hbase/hbase-site.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.11/hos/galaxy-hos-service.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.12/hbase/hbase-site.xml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.12/hbase/update-hbase-23.12.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.12/hos/galaxy-hos-service.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/2023/TSG-23.12/phoenix/update-phoenix-23.12.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.01/hbase/update-hbase-24.01.txt (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.01/hos/galaxy-hos-service.yml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.01/phoenix/update-phoenix-24.01.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/README.md (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/etl_session_record_kafka_to_kafka (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/grootstream.yaml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/session_record_processed_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/udf.plugins (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/集中式/dos_event_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/集中式/etl_proxy_event_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/集中式/etl_session_record_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/集中式/etl_transaction_record_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02.1/Groot-Stream/集中式/etl_voip_record_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02/clickhouse/Clickhouse_TSG_建表语句.sql (100%) rename Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/03_check.sql => tsg_olap/upgrade/TSG-24.02/clickhouse/check-24.02.sql (99%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.02/clickhouse/update-24.02-ck.sql (96%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.03/Groot-Stream/README.md (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.03/Groot-Stream/grootstream.yaml (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.03/Groot-Stream/集中式/dos_event_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.03/Groot-Stream/集中式/etl_proxy_event_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.03/Groot-Stream/集中式/etl_session_record_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.03/Groot-Stream/集中式/etl_transaction_record_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.03/Groot-Stream/集中式/etl_voip_record_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.04/clickhouse/Clickhouse_TSG_建表语句.sql (99%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.04/clickhouse/check-24.04.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.04/clickhouse/update-24.04-ck.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.05/Groot-Stream/集中式/etl_datapath_telemetry_record_kafka_to_clickhouse (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.05/clickhouse/Clickhouse_TSG_建表语句.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.05/clickhouse/check-24.05.sql (100%) rename {TSG发布版本更新记录 => tsg_olap/upgrade}/TSG-24.05/clickhouse/update-24.05-ck.sql (100%) diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Gohangout/.gitkeep b/TSG发布版本更新记录/2021/TSG-21.09/Gohangout/.gitkeep deleted file mode 100644 index e69de29..0000000 diff --git a/TSG发布版本更新记录/2023/TSG-23.03/clickhouse/.gitkeep b/TSG发布版本更新记录/2023/TSG-23.03/clickhouse/.gitkeep deleted file mode 100644 index e69de29..0000000 diff --git a/Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql b/cyber_narrator/installation/clickhouse/cn_clickhouse_ddl.sql similarity index 96% rename from Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql rename to cyber_narrator/installation/clickhouse/cn_clickhouse_ddl.sql index 38e62e2..e33c6f6 100644 --- a/Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql +++ b/cyber_narrator/installation/clickhouse/cn_clickhouse_ddl.sql @@ -1,2129 +1,2129 @@ -create database IF NOT EXISTS cyber_narrator_galaxy ON CLUSTER ck_cluster; -create database IF NOT EXISTS cyber_narrator_galaxy ON CLUSTER ck_query; - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_record_cn_local ON CLUSTER ck_cluster ( - recv_time Int64, - log_id UInt64, - flags UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int64, - decoded_as String, - client_ip String, - server_ip String, - client_port Int64, - server_port Int64, - app String, - app_transition String, - decoded_path String, - ip_protocol LowCardinality(String), - l7_protocol String, - out_link_id Nullable(Int64), - in_link_id Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - http_host String, - http_url String, - http_cookie String, - http_referer String, - http_user_agent String, - http_request_line String, - http_response_line String, - http_status_code Nullable(Int64), - ssl_version String, - ssl_sni String, - ssl_san String, - ssl_ja3_hash String, - ssl_ja3s_hash String, - ssl_cert_issuer String, - ssl_cert_subject String, - dns_qr Nullable(Int64), - dns_opcode Nullable(Int64), - dns_aa Nullable(Int64), - dns_rcode Nullable(Int64), - dns_qname String, - dns_qtype Nullable(Int64), - dns_qclass Nullable(Int64), - dns_sub Nullable(Int64), - dns_rr String, - ssh_version String, - ssh_auth_success String, - ssh_client_version String, - ssh_server_version String, - ssh_cipher_alg String, - ssh_mac_alg String, - ssh_compression_alg String, - ssh_kex_alg String, - ssh_host_key_alg String, - ssh_host_key String, - ssh_hassh String, - stratum_cryptocurrency String, - stratum_mining_pools String, - stratum_mining_program String, - stratum_mining_subscribe String, - out_link_direction String, - in_link_direction String, - domain String, - domain_sld String, - domain_category_name String, - domain_category_group String, - domain_reputation_level String, - domain_icp_company_name String, - domain_whois_org String, - domain_tags Array(String), - client_zone String, - client_country_region String, - client_super_admin_area String, - client_admin_area String, - client_longitude Nullable(Float64), - client_latitude Nullable(Float64), - client_isp String, - client_asn String, - client_ip_tags Array(String), - server_zone String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_longitude Nullable(Float64), - server_latitude Nullable(Float64), - server_isp String, - server_asn String, - server_ip_tags Array(String), - app_category String, - app_subcategory String, - app_company String, - app_company_category String, - app_tags Array(String), - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64 DEFAULT 1, - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_rtt_ms Nullable(Int64), - http_response_latency_ms Nullable(Int64), - ssl_handshake_latency_ms Nullable(Int64), - dns_response_latency_ms Nullable(Int64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(recv_time)) ORDER BY recv_time SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_record_cn ON CLUSTER ck_cluster ( - recv_time Int64, - log_id UInt64, - flags UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int64, - decoded_as String, - client_ip String, - server_ip String, - client_port Int64, - server_port Int64, - app String, - app_transition String, - decoded_path String, - ip_protocol LowCardinality(String), - l7_protocol String, - out_link_id Nullable(Int64), - in_link_id Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - http_host String, - http_url String, - http_cookie String, - http_referer String, - http_user_agent String, - http_request_line String, - http_response_line String, - http_status_code Nullable(Int64), - ssl_version String, - ssl_sni String, - ssl_san String, - ssl_ja3_hash String, - ssl_ja3s_hash String, - ssl_cert_issuer String, - ssl_cert_subject String, - dns_qr Nullable(Int64), - dns_opcode Nullable(Int64), - dns_aa Nullable(Int64), - dns_rcode Nullable(Int64), - dns_qname String, - dns_qtype Nullable(Int64), - dns_qclass Nullable(Int64), - dns_sub Nullable(Int64), - dns_rr String, - ssh_version String, - ssh_auth_success String, - ssh_client_version String, - ssh_server_version String, - ssh_cipher_alg String, - ssh_mac_alg String, - ssh_compression_alg String, - ssh_kex_alg String, - ssh_host_key_alg String, - ssh_host_key String, - ssh_hassh String, - stratum_cryptocurrency String, - stratum_mining_pools String, - stratum_mining_program String, - stratum_mining_subscribe String, - out_link_direction String, - in_link_direction String, - domain String, - domain_sld String, - domain_category_name String, - domain_category_group String, - domain_reputation_level String, - domain_icp_company_name String, - domain_whois_org String, - domain_tags Array(String), - client_zone String, - client_country_region String, - client_super_admin_area String, - client_admin_area String, - client_longitude Nullable(Float64), - client_latitude Nullable(Float64), - client_isp String, - client_asn String, - client_ip_tags Array(String), - server_zone String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_longitude Nullable(Float64), - server_latitude Nullable(Float64), - server_isp String, - server_asn String, - server_ip_tags Array(String), - app_category String, - app_subcategory String, - app_company String, - app_company_category String, - app_tags Array(String), - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64 DEFAULT 1, - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_rtt_ms Nullable(Int64), - http_response_latency_ms Nullable(Int64), - ssl_handshake_latency_ms Nullable(Int64), - dns_response_latency_ms Nullable(Int64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_record_cn_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_record_cn ON CLUSTER ck_query ( - recv_time Int64, - log_id UInt64, - flags UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int64, - decoded_as String, - client_ip String, - server_ip String, - client_port Int64, - server_port Int64, - app String, - app_transition String, - decoded_path String, - ip_protocol LowCardinality(String), - l7_protocol String, - out_link_id Nullable(Int64), - in_link_id Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - http_host String, - http_url String, - http_cookie String, - http_referer String, - http_user_agent String, - http_request_line String, - http_response_line String, - http_status_code Nullable(Int64), - ssl_version String, - ssl_sni String, - ssl_san String, - ssl_ja3_hash String, - ssl_ja3s_hash String, - ssl_cert_issuer String, - ssl_cert_subject String, - dns_qr Nullable(Int64), - dns_opcode Nullable(Int64), - dns_aa Nullable(Int64), - dns_rcode Nullable(Int64), - dns_qname String, - dns_qtype Nullable(Int64), - dns_qclass Nullable(Int64), - dns_sub Nullable(Int64), - dns_rr String, - ssh_version String, - ssh_auth_success String, - ssh_client_version String, - ssh_server_version String, - ssh_cipher_alg String, - ssh_mac_alg String, - ssh_compression_alg String, - ssh_kex_alg String, - ssh_host_key_alg String, - ssh_host_key String, - ssh_hassh String, - stratum_cryptocurrency String, - stratum_mining_pools String, - stratum_mining_program String, - stratum_mining_subscribe String, - out_link_direction String, - in_link_direction String, - domain String, - domain_sld String, - domain_category_name String, - domain_category_group String, - domain_reputation_level String, - domain_icp_company_name String, - domain_whois_org String, - domain_tags Array(String), - client_zone String, - client_country_region String, - client_super_admin_area String, - client_admin_area String, - client_longitude Nullable(Float64), - client_latitude Nullable(Float64), - client_isp String, - client_asn String, - client_ip_tags Array(String), - server_zone String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_longitude Nullable(Float64), - server_latitude Nullable(Float64), - server_isp String, - server_asn String, - server_ip_tags Array(String), - app_category String, - app_subcategory String, - app_company String, - app_company_category String, - app_tags Array(String), - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64 DEFAULT 1, - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_rtt_ms Nullable(Int64), - http_response_latency_ms Nullable(Int64), - ssl_handshake_latency_ms Nullable(Int64), - dns_response_latency_ms Nullable(Int64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_record_cn_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip_local ON CLUSTER ck_cluster ( - ip String, - side String, - zone String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64), - asymmetric_sessions Int64, - bulky_sessions Int64, - cbr_streaming_sessions Int64, - download_sessions Int64, - interactive_sessions Int64, - pseudo_unidirectional_sessions Int64, - streaming_sessions Int64, - unidirectional_sessions Int64, - random_looking_sessions Int64, - bidirectional_sessions Int64 -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,ip) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_cluster ( - ip String, - side String, - zone String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64), - asymmetric_sessions Int64, - bulky_sessions Int64, - cbr_streaming_sessions Int64, - download_sessions Int64, - interactive_sessions Int64, - pseudo_unidirectional_sessions Int64, - streaming_sessions Int64, - unidirectional_sessions Int64, - random_looking_sessions Int64, - bidirectional_sessions Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_ip_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_query ( - ip String, - side String, - zone String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64), - asymmetric_sessions Int64, - bulky_sessions Int64, - cbr_streaming_sessions Int64, - download_sessions Int64, - interactive_sessions Int64, - pseudo_unidirectional_sessions Int64, - streaming_sessions Int64, - unidirectional_sessions Int64, - random_looking_sessions Int64, - bidirectional_sessions Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_ip_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region_local ON CLUSTER ck_cluster ( - country_region String, - super_admin_area String, - admin_area String, - side String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,country_region,super_admin_area,admin_area) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_cluster ( - country_region String, - super_admin_area String, - admin_area String, - side String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_query ( - country_region String, - super_admin_area String, - admin_area String, - side String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn_local ON CLUSTER ck_cluster ( - asn String, - isp String, - side String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,asn,isp) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_cluster ( - asn String, - isp String, - side String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_asn_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_query ( - asn String, - isp String, - side String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_asn_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application_local ON CLUSTER ck_cluster ( - app String, - app_category String, - app_subcategory String, - app_company String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,app,app_category,app_subcategory,app_company) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_cluster ( - app String, - app_category String, - app_subcategory String, - app_company String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_query ( - app String, - app_category String, - app_subcategory String, - app_company String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain_local ON CLUSTER ck_cluster ( - domain String, - domain_sld String, - domain_category_name String, - domain_category_group String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,domain,domain_category_name,domain_category_group) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_cluster ( - domain String, - domain_sld String, - domain_category_name String, - domain_category_group String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_domain_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_query ( - domain String, - domain_sld String, - domain_category_name String, - domain_category_group String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_domain_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol_local ON CLUSTER ck_cluster ( - l7_protocol String, - server_port Int64, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,l7_protocol,server_port) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_cluster ( - l7_protocol String, - server_port Int64, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_query ( - l7_protocol String, - server_port Int64, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link_local ON CLUSTER ck_cluster ( - client_country_region String, - client_super_admin_area String, - client_admin_area String, - client_zone String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_zone String, - out_link_id Int64, - in_link_id Int64, - out_link_direction String, - in_link_direction String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_cluster ( - client_country_region String, - client_super_admin_area String, - client_admin_area String, - client_zone String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_zone String, - out_link_id Int64, - in_link_id Int64, - out_link_direction String, - in_link_direction String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_link_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_query ( - client_country_region String, - client_super_admin_area String, - client_admin_area String, - client_zone String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_zone String, - out_link_id Int64, - in_link_id Int64, - out_link_direction String, - in_link_direction String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_link_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app_local ON CLUSTER ck_cluster ( - subscriber_id String, - app String, - imei String, - imsi String, - phone_number String, - apn String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id,app) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_cluster ( - subscriber_id String, - app String, - imei String, - imsi String, - phone_number String, - apn String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_query ( - subscriber_id String, - app String, - imei String, - imsi String, - phone_number String, - apn String, - stat_time Int64, - sent_pkts Int64, - sent_bytes Int64, - received_pkts Int64, - received_bytes Int64, - sessions Int64, - traffic_inbound_byte Int64, - traffic_inbound_pkt Int64, - traffic_outbound_byte Int64, - traffic_outbound_pkt Int64, - traffic_internal_byte Int64, - traffic_internal_pkt Int64, - traffic_through_byte Int64, - traffic_through_pkt Int64, - tcp_c2s_lost_bytes_ratio Nullable(Float64), - tcp_s2c_lost_bytes_ratio Nullable(Float64), - tcp_lost_bytes_ratio Nullable(Float64), - tcp_c2s_o3_pkts_ratio Nullable(Float64), - tcp_s2c_o3_pkts_ratio Nullable(Float64), - tcp_o3_pkts_ratio Nullable(Float64), - tcp_c2s_rtx_bytes_ratio Nullable(Float64), - tcp_s2c_rtx_bytes_ratio Nullable(Float64), - tcp_rtx_bytes_ratio Nullable(Float64), - tcp_c2s_rtx_pkts_ratio Nullable(Float64), - tcp_s2c_rtx_pkts_ratio Nullable(Float64), - tcp_rtx_pkts_ratio Nullable(Float64), - avg_tcp_rtt_ms Nullable(Float64), - avg_http_response_latency_ms Nullable(Float64), - avg_ssl_handshake_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand()); - - -CREATE TABLE cyber_narrator_galaxy.metric_tag_local -( - tag String, - stat_time Int64, - ip_sketch String, - domain_sketch String, - ip_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(ip_sketch), - domain_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(domain_sketch) -) -ENGINE = MergeTree -PARTITION BY toYYYYMMDD(toDate(stat_time)) -ORDER BY (stat_time, tag); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_tag ON CLUSTER ck_cluster ( - tag String, - stat_time Int64, - ip_sketch String, - domain_sketch String, - ip_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(ip_sketch), - domain_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(domain_sketch) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_tag_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_tag ON CLUSTER ck_query ( - tag String, - stat_time Int64, - ip_sketch String, - domain_sketch String, - ip_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(ip_sketch), - domain_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(domain_sketch) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_tag_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.location_subscriber_local ON CLUSTER ck_cluster ( - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - subscriber_longitude Nullable(Float64), - subscriber_latitude Nullable(Float64), - first_location String, - second_location String, - third_location String, - data_source String, - stat_time Int64 -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.location_subscriber ON CLUSTER ck_cluster ( - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - subscriber_longitude Nullable(Float64), - subscriber_latitude Nullable(Float64), - first_location String, - second_location String, - third_location String, - data_source String, - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'location_subscriber_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.location_subscriber ON CLUSTER ck_query ( - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - subscriber_longitude Nullable(Float64), - subscriber_latitude Nullable(Float64), - first_location String, - second_location String, - third_location String, - data_source String, - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'location_subscriber_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_server_ip_local ON CLUSTER ck_cluster ( - server_ip String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_isp String, - server_role Array(String), - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,server_ip) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_server_ip ON CLUSTER ck_cluster ( - server_ip String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_isp String, - server_role Array(String), - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_server_ip_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_server_ip ON CLUSTER ck_query ( - server_ip String, - server_country_region String, - server_super_admin_area String, - server_admin_area String, - server_isp String, - server_role Array(String), - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_server_ip_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qname_local ON CLUSTER ck_cluster ( - qname String, - qname_sld String, - qname_tld String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,qname) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qname ON CLUSTER ck_cluster ( - qname String, - qname_sld String, - qname_tld String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qname_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qname ON CLUSTER ck_query ( - qname String, - qname_sld String, - qname_tld String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qname_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qtype_local ON CLUSTER ck_cluster ( - qtype Int64, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,qtype) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qtype ON CLUSTER ck_cluster ( - qtype Int64, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qtype_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qtype ON CLUSTER ck_query ( - qtype Int64, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qtype_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rcode_local ON CLUSTER ck_cluster ( - rcode Int64, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rcode) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rcode ON CLUSTER ck_cluster ( - rcode Int64, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rcode_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rcode ON CLUSTER ck_query ( - rcode Int64, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rcode_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_a_local ON CLUSTER ck_cluster ( - rr_a String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rr_a) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_a ON CLUSTER ck_cluster ( - rr_a String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_a_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_a ON CLUSTER ck_query ( - rr_a String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_a_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_aaaa_local ON CLUSTER ck_cluster ( - rr_aaaa String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rr_aaaa) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_aaaa ON CLUSTER ck_cluster ( - rr_aaaa String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_aaaa_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_aaaa ON CLUSTER ck_query ( - rr_aaaa String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_aaaa_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_cname_local ON CLUSTER ck_cluster ( - rr_cname String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rr_cname) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_cname ON CLUSTER ck_cluster ( - rr_cname String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_cname_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_cname ON CLUSTER ck_query ( - rr_cname String, - stat_time Int64, - query_num Int64, - traffic_inbound_byte Int64, - traffic_outbound_byte Int64, - internal_query_num Int64, - external_query_num Int64, - avg_response_latency_ms Nullable(Float64) -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_cname_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_domain_ip_app_local ON CLUSTER ck_cluster ( - app_name String, - domain String, - ip String, - ip_country_region String, - ip_super_admin_area String, - ip_admin_area String, - ip_asn String, - ip_isp String, - domain_category_name String, - domain_category_group String, - app_category String, - app_subcategory String, - entity_tags Array(String), - stat_time Int64 -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_domain_ip_app ON CLUSTER ck_cluster ( - app_name String, - domain String, - ip String, - ip_country_region String, - ip_super_admin_area String, - ip_admin_area String, - ip_asn String, - ip_isp String, - domain_category_name String, - domain_category_group String, - app_category String, - app_subcategory String, - entity_tags Array(String), - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_domain_ip_app_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_domain_ip_app ON CLUSTER ck_query ( - app_name String, - domain String, - ip String, - ip_country_region String, - ip_super_admin_area String, - ip_admin_area String, - ip_asn String, - ip_isp String, - domain_category_name String, - domain_category_group String, - app_category String, - app_subcategory String, - entity_tags Array(String), - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_domain_ip_app_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute_local ON CLUSTER ck_cluster ( - ip String, - l7_protocol String, - port Int64, - stat_time Int64 -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute ON CLUSTER ck_cluster ( - ip String, - l7_protocol String, - port Int64, - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_cn_ip_dynamic_attribute_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute ON CLUSTER ck_query ( - ip String, - l7_protocol String, - port Int64, - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_cn_ip_dynamic_attribute_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_domain_ip_app_local on cluster ck_cluster -( - app_name String, - domain String, - ip String, - ip_country_region String, - ip_super_admin_area String, - ip_admin_area String, - ip_asn String, - ip_isp String, - domain_category_name String, - domain_category_group String, - app_category String, - app_subcategory String, - entity_tags Array(String), - create_time Int64, - update_time Int64 -) -ENGINE = MergeTree -ORDER BY (ip, - domain, - app_name) -TTL toDateTime(update_time) + toIntervalSecond(2592000), - toDateTime(update_time) + toIntervalSecond(1) GROUP BY ip, - domain, - app_name SET create_time = min(create_time), - update_time = max(update_time), - ip_country_region = anyLast(ip_country_region), - ip_super_admin_area = anyLast(ip_super_admin_area), - ip_admin_area = anyLast(ip_admin_area), - ip_asn = anyLast(ip_asn), - ip_isp = anyLast(ip_isp), - domain_category_name = anyLast(domain_category_name), - domain_category_group = anyLast(domain_category_group), - app_category = anyLast(app_category), - app_subcategory = anyLast(app_subcategory), - entity_tags = groupUniqArrayArray(entity_tags); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_domain_ip_app on cluster ck_query -( - app_name String, - domain String, - ip String, - ip_country_region String, - ip_super_admin_area String, - ip_admin_area String, - ip_asn String, - ip_isp String, - domain_category_name String, - domain_category_group String, - app_category String, - app_subcategory String, - entity_tags Array(String), - create_time Int64, - update_time Int64 -) -ENGINE = Distributed('ck_cluster', - 'cyber_narrator_galaxy', - 'session_relation_domain_ip_app_local', - rand()); - - CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_domain_ip_app on cluster ck_cluster -( - app_name String, - domain String, - ip String, - ip_country_region String, - ip_super_admin_area String, - ip_admin_area String, - ip_asn String, - ip_isp String, - domain_category_name String, - domain_category_group String, - app_category String, - app_subcategory String, - entity_tags Array(String), - create_time Int64, - update_time Int64 -) -ENGINE = Distributed('ck_cluster', - 'cyber_narrator_galaxy', - 'session_relation_domain_ip_app_local', - rand()); - - - CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_subscriber_app_local ON CLUSTER ck_cluster ( - app_name String, - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - app_category String, - app_subcategory String, - create_time Int64, - update_time Int64 -) ENGINE = MergeTree - ORDER BY (subscriber_id, app_name) - TTL toDateTime(update_time) + toIntervalSecond(2592000), - toDateTime(update_time) + toIntervalSecond(1) - GROUP BY subscriber_id, app_name - SET create_time = min(create_time), - update_time = max(update_time), - imei = anyLast(imei), - imsi = anyLast(imsi), - phone_number = anyLast(phone_number), - apn = anyLast(apn), - app_category = anyLast(app_category), - app_subcategory = anyLast(app_subcategory); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_subscriber_app ON CLUSTER ck_cluster ( - app_name String, - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - app_category String, - app_subcategory String, - create_time Int64, - update_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_relation_subscriber_app_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_subscriber_app ON CLUSTER ck_query ( - app_name String, - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - app_category String, - app_subcategory String, - create_time Int64, - update_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_relation_subscriber_app_local', rand()); - - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_subscriber_app_local ON CLUSTER ck_cluster ( - app_name String, - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - app_category String, - app_subcategory String, - stat_time Int64 -) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_subscriber_app ON CLUSTER ck_cluster ( - app_name String, - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - app_category String, - app_subcategory String, - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_subscriber_app_local', rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_subscriber_app ON CLUSTER ck_query ( - app_name String, - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - app_category String, - app_subcategory String, - stat_time Int64 -) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_subscriber_app_local', rand()); - - - CREATE TABLE if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute_local on cluster ck_cluster -( - ip String, - l7_protocol String, - port Int64, - create_time Int64, - update_time Int64 -) -ENGINE = MergeTree -ORDER BY (ip, - port, - l7_protocol) -TTL toDateTime(update_time) + toIntervalSecond(2592000), - toDateTime(update_time) + toIntervalSecond(1) GROUP BY ip, - port, - l7_protocol SET create_time = min(create_time), - update_time = max(update_time); - - CREATE TABLE if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute on cluster ck_query -( - ip String, - l7_protocol String, - port Int64, - create_time Int64, - update_time Int64 -) -ENGINE = Distributed('ck_cluster', - 'cyber_narrator_galaxy', - 'cn_ip_dynamic_attribute_local', - rand()); - - CREATE TABLE if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute on cluster ck_cluster -( - ip String, - l7_protocol String, - port Int64, - create_time Int64, - update_time Int64 -) -ENGINE = Distributed('ck_cluster', - 'cyber_narrator_galaxy', - 'cn_ip_dynamic_attribute_local', - rand()); - - - CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event_local ON CLUSTER ck_cluster -( - status Int64, - is_builtin Int64, - rule_type String, - victim_ip String, - victim_country_region String, - victim_super_admin_area String, - victim_admin_area String, - victim_longitude Nullable(Float64), - victim_latitude Nullable(Float64), - offender_ip String, - offender_country_region String, - offender_super_admin_area String, - offender_admin_area String, - offender_longitude Nullable(Float64), - offender_latitude Nullable(Float64), - event_info String, - event_key String, - severity String, - event_type String, - duration_s Int64, - event_name String, - app String, - domain String, - event_id Int64, - rule_id Int64, - start_time Int64, - end_time Int64, - match_times Int64 -) -ENGINE = MergeTree -ORDER BY event_id -TTL toDateTime(end_time) + toIntervalSecond(2592000), - toDateTime(end_time) + toIntervalSecond(1) GROUP BY event_id - SET - status = anyLast(status), - is_builtin = anyLast(is_builtin), - rule_type = anyLast(rule_type), - victim_ip = anyLast(victim_ip), - victim_country_region = anyLast(victim_country_region), - victim_super_admin_area = anyLast(victim_super_admin_area), - victim_admin_area = anyLast(victim_admin_area), - victim_longitude = anyLast(victim_longitude), - victim_latitude = anyLast(victim_latitude), - offender_ip = anyLast(offender_ip), - offender_country_region = anyLast(offender_country_region), - offender_super_admin_area = anyLast(offender_super_admin_area), - offender_admin_area = anyLast(offender_admin_area), - offender_longitude = anyLast(offender_longitude), - offender_latitude = anyLast(offender_latitude), - event_info = anyLast(event_info), - event_key = anyLast(event_key), - severity = anyLast(severity), - event_type = anyLast(event_type), - duration_s = anyLast(duration_s), - event_name = anyLast(event_name), - app = anyLast(app), - domain = anyLast(domain), - rule_id = anyLast(rule_id), - start_time = anyLast(start_time), - end_time = max(end_time), - match_times = anyLast(match_times); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event ON CLUSTER ck_cluster -( - status Int64, - is_builtin Int64, - rule_type String, - victim_ip String, - victim_country_region String, - victim_super_admin_area String, - victim_admin_area String, - victim_longitude Nullable(Float64), - victim_latitude Nullable(Float64), - offender_ip String, - offender_country_region String, - offender_super_admin_area String, - offender_admin_area String, - offender_longitude Nullable(Float64), - offender_latitude Nullable(Float64), - event_info String, - event_key String, - severity String, - event_type String, - duration_s Int64, - event_name String, - app String, - domain String, - event_id Int64, - rule_id Int64, - start_time Int64, - end_time Int64, - match_times Int64 -) -ENGINE = Distributed('ck_cluster', - 'cyber_narrator_galaxy', - 'cn_security_event_local', - rand()); - -CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event ON CLUSTER ck_query -( - status Int64, - is_builtin Int64, - rule_type String, - victim_ip String, - victim_country_region String, - victim_super_admin_area String, - victim_admin_area String, - victim_longitude Nullable(Float64), - victim_latitude Nullable(Float64), - offender_ip String, - offender_country_region String, - offender_super_admin_area String, - offender_admin_area String, - offender_longitude Nullable(Float64), - offender_latitude Nullable(Float64), - event_info String, - event_key String, - severity String, - event_type String, - duration_s Int64, - event_name String, - app String, - domain String, - event_id Int64, - rule_id Int64, - start_time Int64, - end_time Int64, - match_times Int64 -) -ENGINE = Distributed('ck_cluster', - 'cyber_narrator_galaxy', - 'cn_security_event_local', - rand()); - - - CREATE MATERIALIZED VIEW if not exists cyber_narrator_galaxy.session_relation_domain_ip_app_view_metric on cluster ck_cluster -TO cyber_narrator_galaxy.session_relation_domain_ip_app_local -( - app_name String, - domain String, - ip String, - ip_country_region String, - ip_super_admin_area String, - ip_admin_area String, - ip_asn String, - ip_isp String, - domain_category_name String, - domain_category_group String, - app_category String, - app_subcategory String, - entity_tags Array(String), - create_time Int64, - update_time Int64 -) AS -SELECT - app_name AS app_name, - domain AS domain, - ip AS ip, - anyLast(ip_country_region) AS ip_country_region, - anyLast(ip_super_admin_area) AS ip_super_admin_area, - anyLast(ip_admin_area) AS ip_admin_area, - anyLast(ip_asn) AS ip_asn, - anyLast(ip_isp) AS ip_isp, - anyLast(domain_category_name) AS domain_category_name, - anyLast(domain_category_group) AS domain_category_group, - anyLast(app_category) AS app_category, - anyLast(app_subcategory) AS app_subcategory, - groupUniqArrayArray(entity_tags) AS entity_tags, - min(c1.stat_time) AS create_time, - max(c1.stat_time) AS update_time -FROM cyber_narrator_galaxy.raw_session_relation_domain_ip_app_local AS c1 -GROUP BY - ip, - app_name, - domain; - -CREATE MATERIALIZED VIEW if not exists cyber_narrator_galaxy.session_relation_subscriber_app_view_metric on cluster ck_cluster -TO cyber_narrator_galaxy.session_relation_subscriber_app_local -( - app_name String, - subscriber_id String, - imei String, - imsi String, - phone_number String, - apn String, - app_category String, - app_subcategory String, - create_time Int64, - update_time Int64 -) AS -SELECT - app_name AS app_name, - subscriber_id AS subscriber_id, - anyLast(imei) AS imei, - anyLast(imsi) AS imsi, - anyLast(phone_number) AS phone_number, - anyLast(apn) AS apn, - anyLast(app_category) AS app_category, - anyLast(app_subcategory) AS app_subcategory, - min(c1.stat_time) AS create_time, - max(c1.stat_time) AS update_time -FROM cyber_narrator_galaxy.raw_session_relation_subscriber_app_local AS c1 -GROUP BY - subscriber_id, - app_name; - -CREATE MATERIALIZED VIEW if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute_view_metric on cluster ck_cluster -TO cyber_narrator_galaxy.cn_ip_dynamic_attribute_local -( - ip String, - l7_protocol String, - port Int64, - create_time Int64, - update_time Int64 -) AS -SELECT - ip AS ip, - l7_protocol AS l7_protocol, - port AS port, - min(c1.stat_time) AS create_time, - max(c1.stat_time) AS update_time -FROM cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute_local AS c1 -GROUP BY - ip, - l7_protocol, - port; +create database IF NOT EXISTS cyber_narrator_galaxy ON CLUSTER ck_cluster; +create database IF NOT EXISTS cyber_narrator_galaxy ON CLUSTER ck_query; + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_record_cn_local ON CLUSTER ck_cluster ( + recv_time Int64, + log_id UInt64, + flags UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int64, + decoded_as String, + client_ip String, + server_ip String, + client_port Int64, + server_port Int64, + app String, + app_transition String, + decoded_path String, + ip_protocol LowCardinality(String), + l7_protocol String, + out_link_id Nullable(Int64), + in_link_id Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + http_host String, + http_url String, + http_cookie String, + http_referer String, + http_user_agent String, + http_request_line String, + http_response_line String, + http_status_code Nullable(Int64), + ssl_version String, + ssl_sni String, + ssl_san String, + ssl_ja3_hash String, + ssl_ja3s_hash String, + ssl_cert_issuer String, + ssl_cert_subject String, + dns_qr Nullable(Int64), + dns_opcode Nullable(Int64), + dns_aa Nullable(Int64), + dns_rcode Nullable(Int64), + dns_qname String, + dns_qtype Nullable(Int64), + dns_qclass Nullable(Int64), + dns_sub Nullable(Int64), + dns_rr String, + ssh_version String, + ssh_auth_success String, + ssh_client_version String, + ssh_server_version String, + ssh_cipher_alg String, + ssh_mac_alg String, + ssh_compression_alg String, + ssh_kex_alg String, + ssh_host_key_alg String, + ssh_host_key String, + ssh_hassh String, + stratum_cryptocurrency String, + stratum_mining_pools String, + stratum_mining_program String, + stratum_mining_subscribe String, + out_link_direction String, + in_link_direction String, + domain String, + domain_sld String, + domain_category_name String, + domain_category_group String, + domain_reputation_level String, + domain_icp_company_name String, + domain_whois_org String, + domain_tags Array(String), + client_zone String, + client_country_region String, + client_super_admin_area String, + client_admin_area String, + client_longitude Nullable(Float64), + client_latitude Nullable(Float64), + client_isp String, + client_asn String, + client_ip_tags Array(String), + server_zone String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_longitude Nullable(Float64), + server_latitude Nullable(Float64), + server_isp String, + server_asn String, + server_ip_tags Array(String), + app_category String, + app_subcategory String, + app_company String, + app_company_category String, + app_tags Array(String), + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64 DEFAULT 1, + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_rtt_ms Nullable(Int64), + http_response_latency_ms Nullable(Int64), + ssl_handshake_latency_ms Nullable(Int64), + dns_response_latency_ms Nullable(Int64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(recv_time)) ORDER BY recv_time SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_record_cn ON CLUSTER ck_cluster ( + recv_time Int64, + log_id UInt64, + flags UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int64, + decoded_as String, + client_ip String, + server_ip String, + client_port Int64, + server_port Int64, + app String, + app_transition String, + decoded_path String, + ip_protocol LowCardinality(String), + l7_protocol String, + out_link_id Nullable(Int64), + in_link_id Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + http_host String, + http_url String, + http_cookie String, + http_referer String, + http_user_agent String, + http_request_line String, + http_response_line String, + http_status_code Nullable(Int64), + ssl_version String, + ssl_sni String, + ssl_san String, + ssl_ja3_hash String, + ssl_ja3s_hash String, + ssl_cert_issuer String, + ssl_cert_subject String, + dns_qr Nullable(Int64), + dns_opcode Nullable(Int64), + dns_aa Nullable(Int64), + dns_rcode Nullable(Int64), + dns_qname String, + dns_qtype Nullable(Int64), + dns_qclass Nullable(Int64), + dns_sub Nullable(Int64), + dns_rr String, + ssh_version String, + ssh_auth_success String, + ssh_client_version String, + ssh_server_version String, + ssh_cipher_alg String, + ssh_mac_alg String, + ssh_compression_alg String, + ssh_kex_alg String, + ssh_host_key_alg String, + ssh_host_key String, + ssh_hassh String, + stratum_cryptocurrency String, + stratum_mining_pools String, + stratum_mining_program String, + stratum_mining_subscribe String, + out_link_direction String, + in_link_direction String, + domain String, + domain_sld String, + domain_category_name String, + domain_category_group String, + domain_reputation_level String, + domain_icp_company_name String, + domain_whois_org String, + domain_tags Array(String), + client_zone String, + client_country_region String, + client_super_admin_area String, + client_admin_area String, + client_longitude Nullable(Float64), + client_latitude Nullable(Float64), + client_isp String, + client_asn String, + client_ip_tags Array(String), + server_zone String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_longitude Nullable(Float64), + server_latitude Nullable(Float64), + server_isp String, + server_asn String, + server_ip_tags Array(String), + app_category String, + app_subcategory String, + app_company String, + app_company_category String, + app_tags Array(String), + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64 DEFAULT 1, + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_rtt_ms Nullable(Int64), + http_response_latency_ms Nullable(Int64), + ssl_handshake_latency_ms Nullable(Int64), + dns_response_latency_ms Nullable(Int64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_record_cn_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_record_cn ON CLUSTER ck_query ( + recv_time Int64, + log_id UInt64, + flags UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int64, + decoded_as String, + client_ip String, + server_ip String, + client_port Int64, + server_port Int64, + app String, + app_transition String, + decoded_path String, + ip_protocol LowCardinality(String), + l7_protocol String, + out_link_id Nullable(Int64), + in_link_id Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + http_host String, + http_url String, + http_cookie String, + http_referer String, + http_user_agent String, + http_request_line String, + http_response_line String, + http_status_code Nullable(Int64), + ssl_version String, + ssl_sni String, + ssl_san String, + ssl_ja3_hash String, + ssl_ja3s_hash String, + ssl_cert_issuer String, + ssl_cert_subject String, + dns_qr Nullable(Int64), + dns_opcode Nullable(Int64), + dns_aa Nullable(Int64), + dns_rcode Nullable(Int64), + dns_qname String, + dns_qtype Nullable(Int64), + dns_qclass Nullable(Int64), + dns_sub Nullable(Int64), + dns_rr String, + ssh_version String, + ssh_auth_success String, + ssh_client_version String, + ssh_server_version String, + ssh_cipher_alg String, + ssh_mac_alg String, + ssh_compression_alg String, + ssh_kex_alg String, + ssh_host_key_alg String, + ssh_host_key String, + ssh_hassh String, + stratum_cryptocurrency String, + stratum_mining_pools String, + stratum_mining_program String, + stratum_mining_subscribe String, + out_link_direction String, + in_link_direction String, + domain String, + domain_sld String, + domain_category_name String, + domain_category_group String, + domain_reputation_level String, + domain_icp_company_name String, + domain_whois_org String, + domain_tags Array(String), + client_zone String, + client_country_region String, + client_super_admin_area String, + client_admin_area String, + client_longitude Nullable(Float64), + client_latitude Nullable(Float64), + client_isp String, + client_asn String, + client_ip_tags Array(String), + server_zone String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_longitude Nullable(Float64), + server_latitude Nullable(Float64), + server_isp String, + server_asn String, + server_ip_tags Array(String), + app_category String, + app_subcategory String, + app_company String, + app_company_category String, + app_tags Array(String), + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64 DEFAULT 1, + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_rtt_ms Nullable(Int64), + http_response_latency_ms Nullable(Int64), + ssl_handshake_latency_ms Nullable(Int64), + dns_response_latency_ms Nullable(Int64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_record_cn_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip_local ON CLUSTER ck_cluster ( + ip String, + side String, + zone String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64), + asymmetric_sessions Int64, + bulky_sessions Int64, + cbr_streaming_sessions Int64, + download_sessions Int64, + interactive_sessions Int64, + pseudo_unidirectional_sessions Int64, + streaming_sessions Int64, + unidirectional_sessions Int64, + random_looking_sessions Int64, + bidirectional_sessions Int64 +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,ip) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_cluster ( + ip String, + side String, + zone String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64), + asymmetric_sessions Int64, + bulky_sessions Int64, + cbr_streaming_sessions Int64, + download_sessions Int64, + interactive_sessions Int64, + pseudo_unidirectional_sessions Int64, + streaming_sessions Int64, + unidirectional_sessions Int64, + random_looking_sessions Int64, + bidirectional_sessions Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_ip_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_query ( + ip String, + side String, + zone String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64), + asymmetric_sessions Int64, + bulky_sessions Int64, + cbr_streaming_sessions Int64, + download_sessions Int64, + interactive_sessions Int64, + pseudo_unidirectional_sessions Int64, + streaming_sessions Int64, + unidirectional_sessions Int64, + random_looking_sessions Int64, + bidirectional_sessions Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_ip_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region_local ON CLUSTER ck_cluster ( + country_region String, + super_admin_area String, + admin_area String, + side String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,country_region,super_admin_area,admin_area) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_cluster ( + country_region String, + super_admin_area String, + admin_area String, + side String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_query ( + country_region String, + super_admin_area String, + admin_area String, + side String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn_local ON CLUSTER ck_cluster ( + asn String, + isp String, + side String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,asn,isp) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_cluster ( + asn String, + isp String, + side String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_asn_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_query ( + asn String, + isp String, + side String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_asn_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application_local ON CLUSTER ck_cluster ( + app String, + app_category String, + app_subcategory String, + app_company String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,app,app_category,app_subcategory,app_company) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_cluster ( + app String, + app_category String, + app_subcategory String, + app_company String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_query ( + app String, + app_category String, + app_subcategory String, + app_company String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain_local ON CLUSTER ck_cluster ( + domain String, + domain_sld String, + domain_category_name String, + domain_category_group String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,domain,domain_category_name,domain_category_group) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_cluster ( + domain String, + domain_sld String, + domain_category_name String, + domain_category_group String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_domain_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_query ( + domain String, + domain_sld String, + domain_category_name String, + domain_category_group String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_domain_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol_local ON CLUSTER ck_cluster ( + l7_protocol String, + server_port Int64, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,l7_protocol,server_port) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_cluster ( + l7_protocol String, + server_port Int64, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_query ( + l7_protocol String, + server_port Int64, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link_local ON CLUSTER ck_cluster ( + client_country_region String, + client_super_admin_area String, + client_admin_area String, + client_zone String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_zone String, + out_link_id Int64, + in_link_id Int64, + out_link_direction String, + in_link_direction String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_cluster ( + client_country_region String, + client_super_admin_area String, + client_admin_area String, + client_zone String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_zone String, + out_link_id Int64, + in_link_id Int64, + out_link_direction String, + in_link_direction String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_link_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_query ( + client_country_region String, + client_super_admin_area String, + client_admin_area String, + client_zone String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_zone String, + out_link_id Int64, + in_link_id Int64, + out_link_direction String, + in_link_direction String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_link_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app_local ON CLUSTER ck_cluster ( + subscriber_id String, + app String, + imei String, + imsi String, + phone_number String, + apn String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id,app) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_cluster ( + subscriber_id String, + app String, + imei String, + imsi String, + phone_number String, + apn String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_query ( + subscriber_id String, + app String, + imei String, + imsi String, + phone_number String, + apn String, + stat_time Int64, + sent_pkts Int64, + sent_bytes Int64, + received_pkts Int64, + received_bytes Int64, + sessions Int64, + traffic_inbound_byte Int64, + traffic_inbound_pkt Int64, + traffic_outbound_byte Int64, + traffic_outbound_pkt Int64, + traffic_internal_byte Int64, + traffic_internal_pkt Int64, + traffic_through_byte Int64, + traffic_through_pkt Int64, + tcp_c2s_lost_bytes_ratio Nullable(Float64), + tcp_s2c_lost_bytes_ratio Nullable(Float64), + tcp_lost_bytes_ratio Nullable(Float64), + tcp_c2s_o3_pkts_ratio Nullable(Float64), + tcp_s2c_o3_pkts_ratio Nullable(Float64), + tcp_o3_pkts_ratio Nullable(Float64), + tcp_c2s_rtx_bytes_ratio Nullable(Float64), + tcp_s2c_rtx_bytes_ratio Nullable(Float64), + tcp_rtx_bytes_ratio Nullable(Float64), + tcp_c2s_rtx_pkts_ratio Nullable(Float64), + tcp_s2c_rtx_pkts_ratio Nullable(Float64), + tcp_rtx_pkts_ratio Nullable(Float64), + avg_tcp_rtt_ms Nullable(Float64), + avg_http_response_latency_ms Nullable(Float64), + avg_ssl_handshake_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand()); + + +CREATE TABLE cyber_narrator_galaxy.metric_tag_local +( + tag String, + stat_time Int64, + ip_sketch String, + domain_sketch String, + ip_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(ip_sketch), + domain_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(domain_sketch) +) +ENGINE = MergeTree +PARTITION BY toYYYYMMDD(toDate(stat_time)) +ORDER BY (stat_time, tag); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_tag ON CLUSTER ck_cluster ( + tag String, + stat_time Int64, + ip_sketch String, + domain_sketch String, + ip_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(ip_sketch), + domain_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(domain_sketch) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_tag_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_tag ON CLUSTER ck_query ( + tag String, + stat_time Int64, + ip_sketch String, + domain_sketch String, + ip_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(ip_sketch), + domain_sketch_agg_state AggregateFunction(uniqTheta,String) MATERIALIZED base64Decode(domain_sketch) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_tag_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.location_subscriber_local ON CLUSTER ck_cluster ( + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + subscriber_longitude Nullable(Float64), + subscriber_latitude Nullable(Float64), + first_location String, + second_location String, + third_location String, + data_source String, + stat_time Int64 +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.location_subscriber ON CLUSTER ck_cluster ( + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + subscriber_longitude Nullable(Float64), + subscriber_latitude Nullable(Float64), + first_location String, + second_location String, + third_location String, + data_source String, + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'location_subscriber_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.location_subscriber ON CLUSTER ck_query ( + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + subscriber_longitude Nullable(Float64), + subscriber_latitude Nullable(Float64), + first_location String, + second_location String, + third_location String, + data_source String, + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'location_subscriber_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_server_ip_local ON CLUSTER ck_cluster ( + server_ip String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_isp String, + server_role Array(String), + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,server_ip) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_server_ip ON CLUSTER ck_cluster ( + server_ip String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_isp String, + server_role Array(String), + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_server_ip_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_server_ip ON CLUSTER ck_query ( + server_ip String, + server_country_region String, + server_super_admin_area String, + server_admin_area String, + server_isp String, + server_role Array(String), + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_server_ip_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qname_local ON CLUSTER ck_cluster ( + qname String, + qname_sld String, + qname_tld String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,qname) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qname ON CLUSTER ck_cluster ( + qname String, + qname_sld String, + qname_tld String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qname_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qname ON CLUSTER ck_query ( + qname String, + qname_sld String, + qname_tld String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qname_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qtype_local ON CLUSTER ck_cluster ( + qtype Int64, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,qtype) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qtype ON CLUSTER ck_cluster ( + qtype Int64, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qtype_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_qtype ON CLUSTER ck_query ( + qtype Int64, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_qtype_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rcode_local ON CLUSTER ck_cluster ( + rcode Int64, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rcode) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rcode ON CLUSTER ck_cluster ( + rcode Int64, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rcode_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rcode ON CLUSTER ck_query ( + rcode Int64, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rcode_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_a_local ON CLUSTER ck_cluster ( + rr_a String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rr_a) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_a ON CLUSTER ck_cluster ( + rr_a String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_a_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_a ON CLUSTER ck_query ( + rr_a String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_a_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_aaaa_local ON CLUSTER ck_cluster ( + rr_aaaa String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rr_aaaa) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_aaaa ON CLUSTER ck_cluster ( + rr_aaaa String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_aaaa_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_aaaa ON CLUSTER ck_query ( + rr_aaaa String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_aaaa_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_cname_local ON CLUSTER ck_cluster ( + rr_cname String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,rr_cname) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_cname ON CLUSTER ck_cluster ( + rr_cname String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_cname_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_cname ON CLUSTER ck_query ( + rr_cname String, + stat_time Int64, + query_num Int64, + traffic_inbound_byte Int64, + traffic_outbound_byte Int64, + internal_query_num Int64, + external_query_num Int64, + avg_response_latency_ms Nullable(Float64) +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_cname_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_domain_ip_app_local ON CLUSTER ck_cluster ( + app_name String, + domain String, + ip String, + ip_country_region String, + ip_super_admin_area String, + ip_admin_area String, + ip_asn String, + ip_isp String, + domain_category_name String, + domain_category_group String, + app_category String, + app_subcategory String, + entity_tags Array(String), + stat_time Int64 +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_domain_ip_app ON CLUSTER ck_cluster ( + app_name String, + domain String, + ip String, + ip_country_region String, + ip_super_admin_area String, + ip_admin_area String, + ip_asn String, + ip_isp String, + domain_category_name String, + domain_category_group String, + app_category String, + app_subcategory String, + entity_tags Array(String), + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_domain_ip_app_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_domain_ip_app ON CLUSTER ck_query ( + app_name String, + domain String, + ip String, + ip_country_region String, + ip_super_admin_area String, + ip_admin_area String, + ip_asn String, + ip_isp String, + domain_category_name String, + domain_category_group String, + app_category String, + app_subcategory String, + entity_tags Array(String), + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_domain_ip_app_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute_local ON CLUSTER ck_cluster ( + ip String, + l7_protocol String, + port Int64, + stat_time Int64 +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute ON CLUSTER ck_cluster ( + ip String, + l7_protocol String, + port Int64, + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_cn_ip_dynamic_attribute_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute ON CLUSTER ck_query ( + ip String, + l7_protocol String, + port Int64, + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_cn_ip_dynamic_attribute_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_domain_ip_app_local on cluster ck_cluster +( + app_name String, + domain String, + ip String, + ip_country_region String, + ip_super_admin_area String, + ip_admin_area String, + ip_asn String, + ip_isp String, + domain_category_name String, + domain_category_group String, + app_category String, + app_subcategory String, + entity_tags Array(String), + create_time Int64, + update_time Int64 +) +ENGINE = MergeTree +ORDER BY (ip, + domain, + app_name) +TTL toDateTime(update_time) + toIntervalSecond(2592000), + toDateTime(update_time) + toIntervalSecond(1) GROUP BY ip, + domain, + app_name SET create_time = min(create_time), + update_time = max(update_time), + ip_country_region = anyLast(ip_country_region), + ip_super_admin_area = anyLast(ip_super_admin_area), + ip_admin_area = anyLast(ip_admin_area), + ip_asn = anyLast(ip_asn), + ip_isp = anyLast(ip_isp), + domain_category_name = anyLast(domain_category_name), + domain_category_group = anyLast(domain_category_group), + app_category = anyLast(app_category), + app_subcategory = anyLast(app_subcategory), + entity_tags = groupUniqArrayArray(entity_tags); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_domain_ip_app on cluster ck_query +( + app_name String, + domain String, + ip String, + ip_country_region String, + ip_super_admin_area String, + ip_admin_area String, + ip_asn String, + ip_isp String, + domain_category_name String, + domain_category_group String, + app_category String, + app_subcategory String, + entity_tags Array(String), + create_time Int64, + update_time Int64 +) +ENGINE = Distributed('ck_cluster', + 'cyber_narrator_galaxy', + 'session_relation_domain_ip_app_local', + rand()); + + CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_domain_ip_app on cluster ck_cluster +( + app_name String, + domain String, + ip String, + ip_country_region String, + ip_super_admin_area String, + ip_admin_area String, + ip_asn String, + ip_isp String, + domain_category_name String, + domain_category_group String, + app_category String, + app_subcategory String, + entity_tags Array(String), + create_time Int64, + update_time Int64 +) +ENGINE = Distributed('ck_cluster', + 'cyber_narrator_galaxy', + 'session_relation_domain_ip_app_local', + rand()); + + + CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_subscriber_app_local ON CLUSTER ck_cluster ( + app_name String, + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + app_category String, + app_subcategory String, + create_time Int64, + update_time Int64 +) ENGINE = MergeTree + ORDER BY (subscriber_id, app_name) + TTL toDateTime(update_time) + toIntervalSecond(2592000), + toDateTime(update_time) + toIntervalSecond(1) + GROUP BY subscriber_id, app_name + SET create_time = min(create_time), + update_time = max(update_time), + imei = anyLast(imei), + imsi = anyLast(imsi), + phone_number = anyLast(phone_number), + apn = anyLast(apn), + app_category = anyLast(app_category), + app_subcategory = anyLast(app_subcategory); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_subscriber_app ON CLUSTER ck_cluster ( + app_name String, + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + app_category String, + app_subcategory String, + create_time Int64, + update_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_relation_subscriber_app_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.session_relation_subscriber_app ON CLUSTER ck_query ( + app_name String, + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + app_category String, + app_subcategory String, + create_time Int64, + update_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'session_relation_subscriber_app_local', rand()); + + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_subscriber_app_local ON CLUSTER ck_cluster ( + app_name String, + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + app_category String, + app_subcategory String, + stat_time Int64 +) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192; + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_subscriber_app ON CLUSTER ck_cluster ( + app_name String, + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + app_category String, + app_subcategory String, + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_subscriber_app_local', rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.raw_session_relation_subscriber_app ON CLUSTER ck_query ( + app_name String, + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + app_category String, + app_subcategory String, + stat_time Int64 +) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'raw_session_relation_subscriber_app_local', rand()); + + + CREATE TABLE if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute_local on cluster ck_cluster +( + ip String, + l7_protocol String, + port Int64, + create_time Int64, + update_time Int64 +) +ENGINE = MergeTree +ORDER BY (ip, + port, + l7_protocol) +TTL toDateTime(update_time) + toIntervalSecond(2592000), + toDateTime(update_time) + toIntervalSecond(1) GROUP BY ip, + port, + l7_protocol SET create_time = min(create_time), + update_time = max(update_time); + + CREATE TABLE if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute on cluster ck_query +( + ip String, + l7_protocol String, + port Int64, + create_time Int64, + update_time Int64 +) +ENGINE = Distributed('ck_cluster', + 'cyber_narrator_galaxy', + 'cn_ip_dynamic_attribute_local', + rand()); + + CREATE TABLE if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute on cluster ck_cluster +( + ip String, + l7_protocol String, + port Int64, + create_time Int64, + update_time Int64 +) +ENGINE = Distributed('ck_cluster', + 'cyber_narrator_galaxy', + 'cn_ip_dynamic_attribute_local', + rand()); + + + CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event_local ON CLUSTER ck_cluster +( + status Int64, + is_builtin Int64, + rule_type String, + victim_ip String, + victim_country_region String, + victim_super_admin_area String, + victim_admin_area String, + victim_longitude Nullable(Float64), + victim_latitude Nullable(Float64), + offender_ip String, + offender_country_region String, + offender_super_admin_area String, + offender_admin_area String, + offender_longitude Nullable(Float64), + offender_latitude Nullable(Float64), + event_info String, + event_key String, + severity String, + event_type String, + duration_s Int64, + event_name String, + app String, + domain String, + event_id Int64, + rule_id Int64, + start_time Int64, + end_time Int64, + match_times Int64 +) +ENGINE = MergeTree +ORDER BY event_id +TTL toDateTime(end_time) + toIntervalSecond(2592000), + toDateTime(end_time) + toIntervalSecond(1) GROUP BY event_id + SET + status = anyLast(status), + is_builtin = anyLast(is_builtin), + rule_type = anyLast(rule_type), + victim_ip = anyLast(victim_ip), + victim_country_region = anyLast(victim_country_region), + victim_super_admin_area = anyLast(victim_super_admin_area), + victim_admin_area = anyLast(victim_admin_area), + victim_longitude = anyLast(victim_longitude), + victim_latitude = anyLast(victim_latitude), + offender_ip = anyLast(offender_ip), + offender_country_region = anyLast(offender_country_region), + offender_super_admin_area = anyLast(offender_super_admin_area), + offender_admin_area = anyLast(offender_admin_area), + offender_longitude = anyLast(offender_longitude), + offender_latitude = anyLast(offender_latitude), + event_info = anyLast(event_info), + event_key = anyLast(event_key), + severity = anyLast(severity), + event_type = anyLast(event_type), + duration_s = anyLast(duration_s), + event_name = anyLast(event_name), + app = anyLast(app), + domain = anyLast(domain), + rule_id = anyLast(rule_id), + start_time = anyLast(start_time), + end_time = max(end_time), + match_times = anyLast(match_times); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event ON CLUSTER ck_cluster +( + status Int64, + is_builtin Int64, + rule_type String, + victim_ip String, + victim_country_region String, + victim_super_admin_area String, + victim_admin_area String, + victim_longitude Nullable(Float64), + victim_latitude Nullable(Float64), + offender_ip String, + offender_country_region String, + offender_super_admin_area String, + offender_admin_area String, + offender_longitude Nullable(Float64), + offender_latitude Nullable(Float64), + event_info String, + event_key String, + severity String, + event_type String, + duration_s Int64, + event_name String, + app String, + domain String, + event_id Int64, + rule_id Int64, + start_time Int64, + end_time Int64, + match_times Int64 +) +ENGINE = Distributed('ck_cluster', + 'cyber_narrator_galaxy', + 'cn_security_event_local', + rand()); + +CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.cn_security_event ON CLUSTER ck_query +( + status Int64, + is_builtin Int64, + rule_type String, + victim_ip String, + victim_country_region String, + victim_super_admin_area String, + victim_admin_area String, + victim_longitude Nullable(Float64), + victim_latitude Nullable(Float64), + offender_ip String, + offender_country_region String, + offender_super_admin_area String, + offender_admin_area String, + offender_longitude Nullable(Float64), + offender_latitude Nullable(Float64), + event_info String, + event_key String, + severity String, + event_type String, + duration_s Int64, + event_name String, + app String, + domain String, + event_id Int64, + rule_id Int64, + start_time Int64, + end_time Int64, + match_times Int64 +) +ENGINE = Distributed('ck_cluster', + 'cyber_narrator_galaxy', + 'cn_security_event_local', + rand()); + + + CREATE MATERIALIZED VIEW if not exists cyber_narrator_galaxy.session_relation_domain_ip_app_view_metric on cluster ck_cluster +TO cyber_narrator_galaxy.session_relation_domain_ip_app_local +( + app_name String, + domain String, + ip String, + ip_country_region String, + ip_super_admin_area String, + ip_admin_area String, + ip_asn String, + ip_isp String, + domain_category_name String, + domain_category_group String, + app_category String, + app_subcategory String, + entity_tags Array(String), + create_time Int64, + update_time Int64 +) AS +SELECT + app_name AS app_name, + domain AS domain, + ip AS ip, + anyLast(ip_country_region) AS ip_country_region, + anyLast(ip_super_admin_area) AS ip_super_admin_area, + anyLast(ip_admin_area) AS ip_admin_area, + anyLast(ip_asn) AS ip_asn, + anyLast(ip_isp) AS ip_isp, + anyLast(domain_category_name) AS domain_category_name, + anyLast(domain_category_group) AS domain_category_group, + anyLast(app_category) AS app_category, + anyLast(app_subcategory) AS app_subcategory, + groupUniqArrayArray(entity_tags) AS entity_tags, + min(c1.stat_time) AS create_time, + max(c1.stat_time) AS update_time +FROM cyber_narrator_galaxy.raw_session_relation_domain_ip_app_local AS c1 +GROUP BY + ip, + app_name, + domain; + +CREATE MATERIALIZED VIEW if not exists cyber_narrator_galaxy.session_relation_subscriber_app_view_metric on cluster ck_cluster +TO cyber_narrator_galaxy.session_relation_subscriber_app_local +( + app_name String, + subscriber_id String, + imei String, + imsi String, + phone_number String, + apn String, + app_category String, + app_subcategory String, + create_time Int64, + update_time Int64 +) AS +SELECT + app_name AS app_name, + subscriber_id AS subscriber_id, + anyLast(imei) AS imei, + anyLast(imsi) AS imsi, + anyLast(phone_number) AS phone_number, + anyLast(apn) AS apn, + anyLast(app_category) AS app_category, + anyLast(app_subcategory) AS app_subcategory, + min(c1.stat_time) AS create_time, + max(c1.stat_time) AS update_time +FROM cyber_narrator_galaxy.raw_session_relation_subscriber_app_local AS c1 +GROUP BY + subscriber_id, + app_name; + +CREATE MATERIALIZED VIEW if not exists cyber_narrator_galaxy.cn_ip_dynamic_attribute_view_metric on cluster ck_cluster +TO cyber_narrator_galaxy.cn_ip_dynamic_attribute_local +( + ip String, + l7_protocol String, + port Int64, + create_time Int64, + update_time Int64 +) AS +SELECT + ip AS ip, + l7_protocol AS l7_protocol, + port AS port, + min(c1.stat_time) AS create_time, + max(c1.stat_time) AS update_time +FROM cyber_narrator_galaxy.raw_cn_ip_dynamic_attribute_local AS c1 +GROUP BY + ip, + l7_protocol, + port; diff --git a/Clickhouse最新全量建表语句/Clickhouse_CN_校验sql.sql b/cyber_narrator/installation/clickhouse/cn_clickhouse_ddl_check.sql similarity index 100% rename from Clickhouse最新全量建表语句/Clickhouse_CN_校验sql.sql rename to cyber_narrator/installation/clickhouse/cn_clickhouse_ddl_check.sql diff --git a/Clickhouse最新全量建表语句/Clickhouse_CN_NFSP建表语句.sql b/cyber_narrator/installation/clickhouse/cn_nfsp_clickhouse_ddl.sql similarity index 100% rename from Clickhouse最新全量建表语句/Clickhouse_CN_NFSP建表语句.sql rename to cyber_narrator/installation/clickhouse/cn_nfsp_clickhouse_ddl.sql diff --git a/Groot-Stream 最新全量配置模版/CN/README.md b/cyber_narrator/installation/groot_stream/README.md similarity index 100% rename from Groot-Stream 最新全量配置模版/CN/README.md rename to cyber_narrator/installation/groot_stream/README.md diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka b/cyber_narrator/installation/groot_stream/etl_session_record_processed_kafka_to_cn_kafka similarity index 100% rename from CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka rename to cyber_narrator/installation/groot_stream/etl_session_record_processed_kafka_to_cn_kafka diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/grootstream.yaml b/cyber_narrator/installation/groot_stream/grootstream.yaml similarity index 100% rename from CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/grootstream.yaml rename to cyber_narrator/installation/groot_stream/grootstream.yaml diff --git a/Groot-Stream 最新全量配置模版/CN/udf.plugins b/cyber_narrator/installation/groot_stream/udf.plugins similarity index 100% rename from Groot-Stream 最新全量配置模版/CN/udf.plugins rename to cyber_narrator/installation/groot_stream/udf.plugins diff --git a/CN发布版本更新记录/2022/CN-22.03.rc1/clickhouse/update-03.rc1-ck.sql b/cyber_narrator/upgrade/2022/CN-22.03.rc1/clickhouse/update-03.rc1-ck.sql similarity index 100% rename from CN发布版本更新记录/2022/CN-22.03.rc1/clickhouse/update-03.rc1-ck.sql rename to cyber_narrator/upgrade/2022/CN-22.03.rc1/clickhouse/update-03.rc1-ck.sql diff --git a/CN发布版本更新记录/2022/CN-22.05/clickhouse/update-05-ck.sql b/cyber_narrator/upgrade/2022/CN-22.05/clickhouse/update-05-ck.sql similarity index 100% rename from CN发布版本更新记录/2022/CN-22.05/clickhouse/update-05-ck.sql rename to cyber_narrator/upgrade/2022/CN-22.05/clickhouse/update-05-ck.sql diff --git a/CN发布版本更新记录/2022/CN-22.09/clickhouse/update-09-ck.sql b/cyber_narrator/upgrade/2022/CN-22.09/clickhouse/update-09-ck.sql similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/clickhouse/update-09-ck.sql rename to cyber_narrator/upgrade/2022/CN-22.09/clickhouse/update-09-ck.sql diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_cn_record.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_cn_record.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_cn_record.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_cn_record.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_application_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_application_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_application_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_application_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_asn_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_asn_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_asn_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_asn_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_domain_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_domain_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_domain_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_domain_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_http_host_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_http_host_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_http_host_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_http_host_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_idc_renter_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_idc_renter_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_idc_renter_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_idc_renter_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_protocol_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_protocol_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_protocol_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_protocol_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_region_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_region_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_region_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_region_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ssl_sni_cn.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ssl_sni_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ssl_sni_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ssl_sni_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_cn_record.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_cn_record.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_cn_record.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_cn_record.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_application_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_application_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_application_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_application_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_asn_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_asn_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_asn_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_asn_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_domain_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_domain_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_domain_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_domain_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_http_host_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_http_host_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_http_host_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_http_host_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_idc_renter_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_idc_renter_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_idc_renter_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_idc_renter_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_ip_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_ip_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_ip_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_ip_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_protocol_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_protocol_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_protocol_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_protocol_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_region_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_region_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_region_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_region_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_ssl_sni_cn.yml b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_ssl_sni_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/conf/k2ck_metric_ssl_sni_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/conf/k2ck_metric_ssl_sni_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.09/gohangout/start_all.sh b/cyber_narrator/upgrade/2022/CN-22.09/gohangout/start_all.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.09/gohangout/start_all.sh rename to cyber_narrator/upgrade/2022/CN-22.09/gohangout/start_all.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/clickhouse/update-10-ck.sql b/cyber_narrator/upgrade/2022/CN-22.10/clickhouse/update-10-ck.sql similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/clickhouse/update-10-ck.sql rename to cyber_narrator/upgrade/2022/CN-22.10/clickhouse/update-10-ck.sql diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qname_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qname_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qname_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qname_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qtype_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qtype_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qtype_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_qtype_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rcode_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rcode_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rcode_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rcode_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_a_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_a_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_a_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_a_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_aaaa_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_aaaa_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_aaaa_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_aaaa_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_cname_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_cname_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_cname_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_rr_cname_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_server_ip_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_server_ip_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_server_ip_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_dns_server_ip_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_link_cn.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_link_cn.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_link_cn.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_link_cn.sh diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qname_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qname_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qname_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qname_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qtype_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qtype_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qtype_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_qtype_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rcode_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rcode_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rcode_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rcode_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_a_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_a_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_a_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_a_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_aaaa_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_aaaa_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_aaaa_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_aaaa_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_cname_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_cname_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_cname_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_rr_cname_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_server_ip_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_server_ip_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_server_ip_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_dns_server_ip_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_link_cn.yml b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_link_cn.yml similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/conf/k2ck_metric_link_cn.yml rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/conf/k2ck_metric_link_cn.yml diff --git a/CN发布版本更新记录/2022/CN-22.10/gohangout/start_all.sh b/cyber_narrator/upgrade/2022/CN-22.10/gohangout/start_all.sh similarity index 100% rename from CN发布版本更新记录/2022/CN-22.10/gohangout/start_all.sh rename to cyber_narrator/upgrade/2022/CN-22.10/gohangout/start_all.sh diff --git a/CN发布版本更新记录/2023/CN-23.02/.gitkeep b/cyber_narrator/upgrade/2023/CN-23.02/.gitkeep similarity index 100% rename from CN发布版本更新记录/2023/CN-23.02/.gitkeep rename to cyber_narrator/upgrade/2023/CN-23.02/.gitkeep diff --git a/CN发布版本更新记录/2023/CN-23.02/clickhouse/.gitkeep b/cyber_narrator/upgrade/2023/CN-23.02/clickhouse/.gitkeep similarity index 100% rename from CN发布版本更新记录/2023/CN-23.02/clickhouse/.gitkeep rename to cyber_narrator/upgrade/2023/CN-23.02/clickhouse/.gitkeep diff --git a/CN发布版本更新记录/2023/CN-23.02/clickhouse/update-02-ck.sql b/cyber_narrator/upgrade/2023/CN-23.02/clickhouse/update-02-ck.sql similarity index 100% rename from CN发布版本更新记录/2023/CN-23.02/clickhouse/update-02-ck.sql rename to cyber_narrator/upgrade/2023/CN-23.02/clickhouse/update-02-ck.sql diff --git a/CN发布版本更新记录/2023/CN-23.06/.gitkeep b/cyber_narrator/upgrade/2023/CN-23.06/.gitkeep similarity index 100% rename from CN发布版本更新记录/2023/CN-23.06/.gitkeep rename to cyber_narrator/upgrade/2023/CN-23.06/.gitkeep diff --git a/CN发布版本更新记录/2023/CN-23.06/clickhouse/.gitkeep b/cyber_narrator/upgrade/2023/CN-23.06/clickhouse/.gitkeep similarity index 100% rename from CN发布版本更新记录/2023/CN-23.06/clickhouse/.gitkeep rename to cyber_narrator/upgrade/2023/CN-23.06/clickhouse/.gitkeep diff --git a/CN发布版本更新记录/2023/CN-23.06/clickhouse/update-23.06-ck.sql b/cyber_narrator/upgrade/2023/CN-23.06/clickhouse/update-23.06-ck.sql similarity index 100% rename from CN发布版本更新记录/2023/CN-23.06/clickhouse/update-23.06-ck.sql rename to cyber_narrator/upgrade/2023/CN-23.06/clickhouse/update-23.06-ck.sql diff --git a/CN发布版本更新记录/2023/CN-23.07/clickhouse/update-23.07-ck.sql b/cyber_narrator/upgrade/2023/CN-23.07/clickhouse/update-23.07-ck.sql similarity index 100% rename from CN发布版本更新记录/2023/CN-23.07/clickhouse/update-23.07-ck.sql rename to cyber_narrator/upgrade/2023/CN-23.07/clickhouse/update-23.07-ck.sql diff --git a/CN发布版本更新记录/2023/CN-23.09/clickhouse/update-23.09-ck.sql b/cyber_narrator/upgrade/2023/CN-23.09/clickhouse/update-23.09-ck.sql similarity index 100% rename from CN发布版本更新记录/2023/CN-23.09/clickhouse/update-23.09-ck.sql rename to cyber_narrator/upgrade/2023/CN-23.09/clickhouse/update-23.09-ck.sql diff --git a/CN发布版本更新记录/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_dynamic_attribute_cn.sh b/cyber_narrator/upgrade/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_dynamic_attribute_cn.sh similarity index 100% rename from CN发布版本更新记录/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_dynamic_attribute_cn.sh rename to cyber_narrator/upgrade/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_ip_dynamic_attribute_cn.sh diff --git a/CN发布版本更新记录/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_relation_cn.sh b/cyber_narrator/upgrade/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_relation_cn.sh similarity index 100% rename from CN发布版本更新记录/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_relation_cn.sh rename to cyber_narrator/upgrade/2023/CN-23.09/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_relation_cn.sh diff --git a/CN发布版本更新记录/2023/CN-23.09/gohangout/conf/k2ck_metric_ip_dynamic_attribute_cn.yml b/cyber_narrator/upgrade/2023/CN-23.09/gohangout/conf/k2ck_metric_ip_dynamic_attribute_cn.yml similarity index 100% rename from CN发布版本更新记录/2023/CN-23.09/gohangout/conf/k2ck_metric_ip_dynamic_attribute_cn.yml rename to cyber_narrator/upgrade/2023/CN-23.09/gohangout/conf/k2ck_metric_ip_dynamic_attribute_cn.yml diff --git a/CN发布版本更新记录/2023/CN-23.09/gohangout/conf/k2ck_metric_relation_cn.yml b/cyber_narrator/upgrade/2023/CN-23.09/gohangout/conf/k2ck_metric_relation_cn.yml similarity index 100% rename from CN发布版本更新记录/2023/CN-23.09/gohangout/conf/k2ck_metric_relation_cn.yml rename to cyber_narrator/upgrade/2023/CN-23.09/gohangout/conf/k2ck_metric_relation_cn.yml diff --git a/CN发布版本更新记录/2023/CN-23.09/gohangout/start_all.sh b/cyber_narrator/upgrade/2023/CN-23.09/gohangout/start_all.sh similarity index 100% rename from CN发布版本更新记录/2023/CN-23.09/gohangout/start_all.sh rename to cyber_narrator/upgrade/2023/CN-23.09/gohangout/start_all.sh diff --git a/CN发布版本更新记录/2023/CN-23.10/clickhouse/update-23.10-ck.sql b/cyber_narrator/upgrade/2023/CN-23.10/clickhouse/update-23.10-ck.sql similarity index 100% rename from CN发布版本更新记录/2023/CN-23.10/clickhouse/update-23.10-ck.sql rename to cyber_narrator/upgrade/2023/CN-23.10/clickhouse/update-23.10-ck.sql diff --git a/CN发布版本更新记录/2023/CN-23.10/gohangout/.gitkeep b/cyber_narrator/upgrade/2023/CN-23.10/gohangout/.gitkeep similarity index 100% rename from CN发布版本更新记录/2023/CN-23.10/gohangout/.gitkeep rename to cyber_narrator/upgrade/2023/CN-23.10/gohangout/.gitkeep diff --git a/CN发布版本更新记录/2023/CN-23.10/gohangout/bin/ghoStart/start_gohangout_k2ck_security_event_cn.sh b/cyber_narrator/upgrade/2023/CN-23.10/gohangout/bin/ghoStart/start_gohangout_k2ck_security_event_cn.sh similarity index 100% rename from CN发布版本更新记录/2023/CN-23.10/gohangout/bin/ghoStart/start_gohangout_k2ck_security_event_cn.sh rename to cyber_narrator/upgrade/2023/CN-23.10/gohangout/bin/ghoStart/start_gohangout_k2ck_security_event_cn.sh diff --git a/CN发布版本更新记录/2023/CN-23.10/gohangout/conf/k2ck_security_event_cn.yml b/cyber_narrator/upgrade/2023/CN-23.10/gohangout/conf/k2ck_security_event_cn.yml similarity index 100% rename from CN发布版本更新记录/2023/CN-23.10/gohangout/conf/k2ck_security_event_cn.yml rename to cyber_narrator/upgrade/2023/CN-23.10/gohangout/conf/k2ck_security_event_cn.yml diff --git a/CN发布版本更新记录/2023/CN-23.10/gohangout/start_all.sh b/cyber_narrator/upgrade/2023/CN-23.10/gohangout/start_all.sh similarity index 100% rename from CN发布版本更新记录/2023/CN-23.10/gohangout/start_all.sh rename to cyber_narrator/upgrade/2023/CN-23.10/gohangout/start_all.sh diff --git a/CN发布版本更新记录/2023/CN-23.12/clickhouse/update-23.12-ck.sql b/cyber_narrator/upgrade/2023/CN-23.12/clickhouse/update-23.12-ck.sql similarity index 100% rename from CN发布版本更新记录/2023/CN-23.12/clickhouse/update-23.12-ck.sql rename to cyber_narrator/upgrade/2023/CN-23.12/clickhouse/update-23.12-ck.sql diff --git a/CN发布版本更新记录/2023/CN-23.12/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_subscriber_app_cn.sh b/cyber_narrator/upgrade/2023/CN-23.12/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_subscriber_app_cn.sh similarity index 100% rename from CN发布版本更新记录/2023/CN-23.12/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_subscriber_app_cn.sh rename to cyber_narrator/upgrade/2023/CN-23.12/gohangout/bin/ghoStart/start_gohangout_k2ck_metric_subscriber_app_cn.sh diff --git a/CN发布版本更新记录/2023/CN-23.12/gohangout/conf/k2ck_metric_subscriber_app_cn.yml b/cyber_narrator/upgrade/2023/CN-23.12/gohangout/conf/k2ck_metric_subscriber_app_cn.yml similarity index 100% rename from CN发布版本更新记录/2023/CN-23.12/gohangout/conf/k2ck_metric_subscriber_app_cn.yml rename to cyber_narrator/upgrade/2023/CN-23.12/gohangout/conf/k2ck_metric_subscriber_app_cn.yml diff --git a/CN发布版本更新记录/2023/CN-23.12/gohangout/start_all.sh b/cyber_narrator/upgrade/2023/CN-23.12/gohangout/start_all.sh similarity index 100% rename from CN发布版本更新记录/2023/CN-23.12/gohangout/start_all.sh rename to cyber_narrator/upgrade/2023/CN-23.12/gohangout/start_all.sh diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/README.md b/cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/README.md similarity index 100% rename from CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/README.md rename to cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/README.md diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_kafka_to_cn_kafka b/cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/etl_session_record_kafka_to_cn_kafka similarity index 100% rename from CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_kafka_to_cn_kafka rename to cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/etl_session_record_kafka_to_cn_kafka diff --git a/Groot-Stream 最新全量配置模版/CN/etl_session_record_processed_kafka_to_cn_kafka b/cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka similarity index 100% rename from Groot-Stream 最新全量配置模版/CN/etl_session_record_processed_kafka_to_cn_kafka rename to cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka diff --git a/Groot-Stream 最新全量配置模版/CN/grootstream.yaml b/cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/grootstream.yaml similarity index 100% rename from Groot-Stream 最新全量配置模版/CN/grootstream.yaml rename to cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/grootstream.yaml diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/udf.plugins b/cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/udf.plugins similarity index 100% rename from CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/udf.plugins rename to cyber_narrator/upgrade/2024/CN-24.01.rc1/CN/groot/udf.plugins diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/clickhouse/check-24.01.rc1-ck.sql b/cyber_narrator/upgrade/2024/CN-24.01.rc1/clickhouse/check-24.01.rc1-ck.sql similarity index 100% rename from CN发布版本更新记录/2024/CN-24.01.rc1/clickhouse/check-24.01.rc1-ck.sql rename to cyber_narrator/upgrade/2024/CN-24.01.rc1/clickhouse/check-24.01.rc1-ck.sql diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/clickhouse/update-24.01.rc1-ck.sql b/cyber_narrator/upgrade/2024/CN-24.01.rc1/clickhouse/update-24.01.rc1-ck.sql similarity index 100% rename from CN发布版本更新记录/2024/CN-24.01.rc1/clickhouse/update-24.01.rc1-ck.sql rename to cyber_narrator/upgrade/2024/CN-24.01.rc1/clickhouse/update-24.01.rc1-ck.sql diff --git a/CN发布版本更新记录/2024/CN-24.03/clickhouse/check-24.03-ck.sql b/cyber_narrator/upgrade/2024/CN-24.03/clickhouse/check-24.03-ck.sql similarity index 100% rename from CN发布版本更新记录/2024/CN-24.03/clickhouse/check-24.03-ck.sql rename to cyber_narrator/upgrade/2024/CN-24.03/clickhouse/check-24.03-ck.sql diff --git a/CN发布版本更新记录/2024/CN-24.03/clickhouse/update-24.03-ck.sql b/cyber_narrator/upgrade/2024/CN-24.03/clickhouse/update-24.03-ck.sql similarity index 100% rename from CN发布版本更新记录/2024/CN-24.03/clickhouse/update-24.03-ck.sql rename to cyber_narrator/upgrade/2024/CN-24.03/clickhouse/update-24.03-ck.sql diff --git a/CN发布版本更新记录/2024/CN-24.03/gohangout/bin/ghoStart/start_gohangout_k2ck_location_subscriber_cn.sh b/cyber_narrator/upgrade/2024/CN-24.03/gohangout/bin/ghoStart/start_gohangout_k2ck_location_subscriber_cn.sh similarity index 100% rename from CN发布版本更新记录/2024/CN-24.03/gohangout/bin/ghoStart/start_gohangout_k2ck_location_subscriber_cn.sh rename to cyber_narrator/upgrade/2024/CN-24.03/gohangout/bin/ghoStart/start_gohangout_k2ck_location_subscriber_cn.sh diff --git a/CN发布版本更新记录/2024/CN-24.03/gohangout/conf/k2ck_location_subscriber_cn.yml b/cyber_narrator/upgrade/2024/CN-24.03/gohangout/conf/k2ck_location_subscriber_cn.yml similarity index 100% rename from CN发布版本更新记录/2024/CN-24.03/gohangout/conf/k2ck_location_subscriber_cn.yml rename to cyber_narrator/upgrade/2024/CN-24.03/gohangout/conf/k2ck_location_subscriber_cn.yml diff --git a/CN发布版本更新记录/2024/CN-24.03/gohangout/start_all.sh b/cyber_narrator/upgrade/2024/CN-24.03/gohangout/start_all.sh similarity index 100% rename from CN发布版本更新记录/2024/CN-24.03/gohangout/start_all.sh rename to cyber_narrator/upgrade/2024/CN-24.03/gohangout/start_all.sh diff --git a/CN发布版本更新记录/2024/CN-24.04/CN/README.md b/cyber_narrator/upgrade/2024/CN-24.04/CN/README.md similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/CN/README.md rename to cyber_narrator/upgrade/2024/CN-24.04/CN/README.md diff --git a/CN发布版本更新记录/2024/CN-24.04/CN/etl_session_record_kafka_to_cn_kafka b/cyber_narrator/upgrade/2024/CN-24.04/CN/etl_session_record_kafka_to_cn_kafka similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/CN/etl_session_record_kafka_to_cn_kafka rename to cyber_narrator/upgrade/2024/CN-24.04/CN/etl_session_record_kafka_to_cn_kafka diff --git a/CN发布版本更新记录/2024/CN-24.04/CN/grootstream.yaml b/cyber_narrator/upgrade/2024/CN-24.04/CN/grootstream.yaml similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/CN/grootstream.yaml rename to cyber_narrator/upgrade/2024/CN-24.04/CN/grootstream.yaml diff --git a/CN发布版本更新记录/2024/CN-24.04/CN/udf.plugins b/cyber_narrator/upgrade/2024/CN-24.04/CN/udf.plugins similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/CN/udf.plugins rename to cyber_narrator/upgrade/2024/CN-24.04/CN/udf.plugins diff --git a/CN发布版本更新记录/2024/CN-24.04/clickhouse/check-24.04-ck.sql b/cyber_narrator/upgrade/2024/CN-24.04/clickhouse/check-24.04-ck.sql similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/clickhouse/check-24.04-ck.sql rename to cyber_narrator/upgrade/2024/CN-24.04/clickhouse/check-24.04-ck.sql diff --git a/CN发布版本更新记录/2024/CN-24.04/clickhouse/update-24.04-ck.sql b/cyber_narrator/upgrade/2024/CN-24.04/clickhouse/update-24.04-ck.sql similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/clickhouse/update-24.04-ck.sql rename to cyber_narrator/upgrade/2024/CN-24.04/clickhouse/update-24.04-ck.sql diff --git a/CN发布版本更新记录/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_cn_ip_dynamic_attribute_cn.sh b/cyber_narrator/upgrade/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_cn_ip_dynamic_attribute_cn.sh similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_cn_ip_dynamic_attribute_cn.sh rename to cyber_narrator/upgrade/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_cn_ip_dynamic_attribute_cn.sh diff --git a/CN发布版本更新记录/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_domain_ip_app_cn.sh b/cyber_narrator/upgrade/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_domain_ip_app_cn.sh similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_domain_ip_app_cn.sh rename to cyber_narrator/upgrade/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_domain_ip_app_cn.sh diff --git a/CN发布版本更新记录/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_subscriber_app_cn.sh b/cyber_narrator/upgrade/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_subscriber_app_cn.sh similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_subscriber_app_cn.sh rename to cyber_narrator/upgrade/2024/CN-24.04/gohangout/bin/start_gohangout_k2ck_raw_session_relation_subscriber_app_cn.sh diff --git a/CN发布版本更新记录/2024/CN-24.04/gohangout/conf/k2ck_raw_cn_ip_dynamic_attribute_cn.yml b/cyber_narrator/upgrade/2024/CN-24.04/gohangout/conf/k2ck_raw_cn_ip_dynamic_attribute_cn.yml similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/gohangout/conf/k2ck_raw_cn_ip_dynamic_attribute_cn.yml rename to cyber_narrator/upgrade/2024/CN-24.04/gohangout/conf/k2ck_raw_cn_ip_dynamic_attribute_cn.yml diff --git a/CN发布版本更新记录/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_domain_ip_app_cn.yml b/cyber_narrator/upgrade/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_domain_ip_app_cn.yml similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_domain_ip_app_cn.yml rename to cyber_narrator/upgrade/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_domain_ip_app_cn.yml diff --git a/CN发布版本更新记录/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_subscriber_app_cn.yml b/cyber_narrator/upgrade/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_subscriber_app_cn.yml similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_subscriber_app_cn.yml rename to cyber_narrator/upgrade/2024/CN-24.04/gohangout/conf/k2ck_raw_session_relation_subscriber_app_cn.yml diff --git a/CN发布版本更新记录/2024/CN-24.04/start_all.sh b/cyber_narrator/upgrade/2024/CN-24.04/start_all.sh similarity index 100% rename from CN发布版本更新记录/2024/CN-24.04/start_all.sh rename to cyber_narrator/upgrade/2024/CN-24.04/start_all.sh diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/01_cat_old_table_row_count.sql b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/01_cat_old_table_row_count.sql similarity index 98% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/01_cat_old_table_row_count.sql rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/01_cat_old_table_row_count.sql index e506a1c..a76e125 100644 --- a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/01_cat_old_table_row_count.sql +++ b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/01_cat_old_table_row_count.sql @@ -1,11 +1,11 @@ -select 'session_record_old' as table_name, count(*) as cnt from tsg_galaxy_v3.session_record_old; - -select 'security_event_old' as table_name, count(*) as cnt from tsg_galaxy_v3.security_event_old; - -select 'transaction_record_old' as table_name, count(*) as cnt from tsg_galaxy_v3.transaction_record_old; - -select 'voip_record_old' as table_name, count(*) as cnt from tsg_galaxy_v3.voip_record_old; - -select 'proxy_event_old' as table_name, count(*) as cnt from tsg_galaxy_v3.proxy_event_old; - +select 'session_record_old' as table_name, count(*) as cnt from tsg_galaxy_v3.session_record_old; + +select 'security_event_old' as table_name, count(*) as cnt from tsg_galaxy_v3.security_event_old; + +select 'transaction_record_old' as table_name, count(*) as cnt from tsg_galaxy_v3.transaction_record_old; + +select 'voip_record_old' as table_name, count(*) as cnt from tsg_galaxy_v3.voip_record_old; + +select 'proxy_event_old' as table_name, count(*) as cnt from tsg_galaxy_v3.proxy_event_old; + select 'dos_event_old' as table_name, count(*) as cnt from tsg_galaxy_v3.dos_event_old; \ No newline at end of file diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/01_rename_old_table.sql b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/01_rename_old_table.sql similarity index 98% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/01_rename_old_table.sql rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/01_rename_old_table.sql index 360a46a..ac4f56c 100644 --- a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/01_rename_old_table.sql +++ b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/01_rename_old_table.sql @@ -1,107 +1,107 @@ -set distributed_ddl_task_timeout = 180; - --- 删除源表同步子表物化视图 -drop VIEW IF EXISTS tsg_galaxy_v3.common_client_ip ON CLUSTER ck_cluster; -drop VIEW IF EXISTS tsg_galaxy_v3.common_http_domain ON CLUSTER ck_cluster; -drop VIEW IF EXISTS tsg_galaxy_v3.common_server_ip ON CLUSTER ck_cluster; -drop VIEW IF EXISTS tsg_galaxy_v3.common_server_domain ON CLUSTER ck_cluster; - --- 删除源表子表相关回表 -drop table IF EXISTS tsg_galaxy_v3.interim_session_record_local ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_client_ip_local ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_domain_local ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_ip_local ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_http_domain_local ON CLUSTER ck_cluster; - -drop table IF EXISTS tsg_galaxy_v3.interim_session_record ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_client_ip ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_domain ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_ip ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.session_record_http_domain ON CLUSTER ck_cluster; - -drop table IF EXISTS tsg_galaxy_v3.interim_session_record ON CLUSTER ck_query; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_client_ip ON CLUSTER ck_query; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_domain ON CLUSTER ck_query; -drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_ip ON CLUSTER ck_query; -drop table IF EXISTS tsg_galaxy_v3.session_record_http_domain ON CLUSTER ck_query; - --- 源表rename到历史表 -RENAME TABLE tsg_galaxy_v3.session_record_local to tsg_galaxy_v3.session_record_local_old on cluster ck_cluster; -RENAME TABLE tsg_galaxy_v3.security_event_local to tsg_galaxy_v3.security_event_local_old on cluster ck_cluster; -RENAME TABLE tsg_galaxy_v3.transaction_record_local to tsg_galaxy_v3.transaction_record_local_old on cluster ck_cluster; -RENAME TABLE tsg_galaxy_v3.voip_record_local to tsg_galaxy_v3.voip_record_local_old on cluster ck_cluster; -RENAME TABLE tsg_galaxy_v3.proxy_event_local to tsg_galaxy_v3.proxy_event_local_old on cluster ck_cluster; -RENAME TABLE tsg_galaxy_v3.dos_event_local to tsg_galaxy_v3.dos_event_local_old on cluster ck_cluster; - --- 删除源表分布式表 -DROP TABLE IF EXISTS tsg_galaxy_v3.session_record ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.session_record ON CLUSTER ck_cluster; -DROP TABLE IF EXISTS tsg_galaxy_v3.security_event ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.security_event ON CLUSTER ck_cluster; -DROP TABLE IF EXISTS tsg_galaxy_v3.transaction_record ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.transaction_record ON CLUSTER ck_cluster; -DROP TABLE IF EXISTS tsg_galaxy_v3.voip_record ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.voip_record ON CLUSTER ck_cluster; -DROP TABLE IF EXISTS tsg_galaxy_v3.proxy_event ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.proxy_event ON CLUSTER ck_cluster; -DROP TABLE IF EXISTS tsg_galaxy_v3.dos_event ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.dos_event ON CLUSTER ck_cluster; - --- assessment_event不用迁移 -drop table IF EXISTS tsg_galaxy_v3.assessment_event on cluster ck_query; -drop table IF EXISTS tsg_galaxy_v3.assessment_event on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.assessment_event_local on cluster ck_cluster; - --- 删除废弃表 -drop table IF EXISTS tsg_galaxy_v3.gtpc_record_local on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.gtpc_record on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.gtpc_record on cluster ck_query; - -drop table IF EXISTS tsg_galaxy_v3.radius_onff_log_local on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.radius_onff_log on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.radius_onff_log on cluster ck_query; - -drop table IF EXISTS tsg_galaxy_v3.radius_record_local on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.radius_record on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.radius_record on cluster ck_query; - -drop table IF EXISTS tsg_galaxy_v3.sys_packet_capture_event_local on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.sys_packet_capture_event on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.sys_packet_capture_event on cluster ck_query; - -drop table IF EXISTS tsg_galaxy_v3.active_defence_event ON CLUSTER ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.active_defence_event ON CLUSTER ck_query; -drop table IF EXISTS tsg_galaxy_v3.active_defence_event_local ON CLUSTER ck_cluster; - --- 创建源码分布式表old -create table IF NOT EXISTS tsg_galaxy_v3.session_record_old ON CLUSTER ck_query ( - common_recv_time Int64, - common_log_id UInt64 -) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,session_record_local_old,rand()); - -create table IF NOT EXISTS tsg_galaxy_v3.security_event_old ON CLUSTER ck_query ( - common_recv_time Int64, - common_log_id UInt64 -) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,security_event_local_old,rand()); - -CREATE TABLE IF NOT EXISTS tsg_galaxy_v3.transaction_record_old ON CLUSTER ck_query( - common_recv_time Int64, - common_log_id UInt64 -) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,transaction_record_local_old,rand()); - -CREATE TABLE IF NOT EXISTS tsg_galaxy_v3.voip_record_old ON CLUSTER ck_query( - common_recv_time Int64, - common_log_id UInt64 -) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,voip_record_local_old,rand()); - -create table IF NOT EXISTS tsg_galaxy_v3.proxy_event_old ON CLUSTER ck_query ( - common_recv_time Int64, - common_log_id UInt64 -) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,proxy_event_local_old,rand()); - -CREATE TABLE IF NOT EXISTS tsg_galaxy_v3.dos_event_old ON CLUSTER ck_query( - log_id UInt64, - profile_id UInt64, - start_time Int64 -) ENGINE = Distributed(ck_cluster,tsg_galaxy_v3,dos_event_local_old,rand()); - +set distributed_ddl_task_timeout = 180; + +-- 删除源表同步子表物化视图 +drop VIEW IF EXISTS tsg_galaxy_v3.common_client_ip ON CLUSTER ck_cluster; +drop VIEW IF EXISTS tsg_galaxy_v3.common_http_domain ON CLUSTER ck_cluster; +drop VIEW IF EXISTS tsg_galaxy_v3.common_server_ip ON CLUSTER ck_cluster; +drop VIEW IF EXISTS tsg_galaxy_v3.common_server_domain ON CLUSTER ck_cluster; + +-- 删除源表子表相关回表 +drop table IF EXISTS tsg_galaxy_v3.interim_session_record_local ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_client_ip_local ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_domain_local ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_ip_local ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_http_domain_local ON CLUSTER ck_cluster; + +drop table IF EXISTS tsg_galaxy_v3.interim_session_record ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_client_ip ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_domain ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_ip ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.session_record_http_domain ON CLUSTER ck_cluster; + +drop table IF EXISTS tsg_galaxy_v3.interim_session_record ON CLUSTER ck_query; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_client_ip ON CLUSTER ck_query; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_domain ON CLUSTER ck_query; +drop table IF EXISTS tsg_galaxy_v3.session_record_common_server_ip ON CLUSTER ck_query; +drop table IF EXISTS tsg_galaxy_v3.session_record_http_domain ON CLUSTER ck_query; + +-- 源表rename到历史表 +RENAME TABLE tsg_galaxy_v3.session_record_local to tsg_galaxy_v3.session_record_local_old on cluster ck_cluster; +RENAME TABLE tsg_galaxy_v3.security_event_local to tsg_galaxy_v3.security_event_local_old on cluster ck_cluster; +RENAME TABLE tsg_galaxy_v3.transaction_record_local to tsg_galaxy_v3.transaction_record_local_old on cluster ck_cluster; +RENAME TABLE tsg_galaxy_v3.voip_record_local to tsg_galaxy_v3.voip_record_local_old on cluster ck_cluster; +RENAME TABLE tsg_galaxy_v3.proxy_event_local to tsg_galaxy_v3.proxy_event_local_old on cluster ck_cluster; +RENAME TABLE tsg_galaxy_v3.dos_event_local to tsg_galaxy_v3.dos_event_local_old on cluster ck_cluster; + +-- 删除源表分布式表 +DROP TABLE IF EXISTS tsg_galaxy_v3.session_record ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.session_record ON CLUSTER ck_cluster; +DROP TABLE IF EXISTS tsg_galaxy_v3.security_event ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.security_event ON CLUSTER ck_cluster; +DROP TABLE IF EXISTS tsg_galaxy_v3.transaction_record ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.transaction_record ON CLUSTER ck_cluster; +DROP TABLE IF EXISTS tsg_galaxy_v3.voip_record ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.voip_record ON CLUSTER ck_cluster; +DROP TABLE IF EXISTS tsg_galaxy_v3.proxy_event ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.proxy_event ON CLUSTER ck_cluster; +DROP TABLE IF EXISTS tsg_galaxy_v3.dos_event ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.dos_event ON CLUSTER ck_cluster; + +-- assessment_event不用迁移 +drop table IF EXISTS tsg_galaxy_v3.assessment_event on cluster ck_query; +drop table IF EXISTS tsg_galaxy_v3.assessment_event on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.assessment_event_local on cluster ck_cluster; + +-- 删除废弃表 +drop table IF EXISTS tsg_galaxy_v3.gtpc_record_local on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.gtpc_record on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.gtpc_record on cluster ck_query; + +drop table IF EXISTS tsg_galaxy_v3.radius_onff_log_local on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.radius_onff_log on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.radius_onff_log on cluster ck_query; + +drop table IF EXISTS tsg_galaxy_v3.radius_record_local on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.radius_record on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.radius_record on cluster ck_query; + +drop table IF EXISTS tsg_galaxy_v3.sys_packet_capture_event_local on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.sys_packet_capture_event on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.sys_packet_capture_event on cluster ck_query; + +drop table IF EXISTS tsg_galaxy_v3.active_defence_event ON CLUSTER ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.active_defence_event ON CLUSTER ck_query; +drop table IF EXISTS tsg_galaxy_v3.active_defence_event_local ON CLUSTER ck_cluster; + +-- 创建源码分布式表old +create table IF NOT EXISTS tsg_galaxy_v3.session_record_old ON CLUSTER ck_query ( + common_recv_time Int64, + common_log_id UInt64 +) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,session_record_local_old,rand()); + +create table IF NOT EXISTS tsg_galaxy_v3.security_event_old ON CLUSTER ck_query ( + common_recv_time Int64, + common_log_id UInt64 +) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,security_event_local_old,rand()); + +CREATE TABLE IF NOT EXISTS tsg_galaxy_v3.transaction_record_old ON CLUSTER ck_query( + common_recv_time Int64, + common_log_id UInt64 +) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,transaction_record_local_old,rand()); + +CREATE TABLE IF NOT EXISTS tsg_galaxy_v3.voip_record_old ON CLUSTER ck_query( + common_recv_time Int64, + common_log_id UInt64 +) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,voip_record_local_old,rand()); + +create table IF NOT EXISTS tsg_galaxy_v3.proxy_event_old ON CLUSTER ck_query ( + common_recv_time Int64, + common_log_id UInt64 +) ENGINE =Distributed(ck_cluster,tsg_galaxy_v3,proxy_event_local_old,rand()); + +CREATE TABLE IF NOT EXISTS tsg_galaxy_v3.dos_event_old ON CLUSTER ck_query( + log_id UInt64, + profile_id UInt64, + start_time Int64 +) ENGINE = Distributed(ck_cluster,tsg_galaxy_v3,dos_event_local_old,rand()); + diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/02_init_new_table.sql b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/02_init_new_table.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/02_init_new_table.sql rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/02_init_new_table.sql diff --git a/TSG发布版本更新记录/TSG-24.02/clickhouse/check-24.02.sql b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/03_check.sql similarity index 100% rename from TSG发布版本更新记录/TSG-24.02/clickhouse/check-24.02.sql rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/03_check.sql diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/04_create_table_2307_to_2402_view.sql b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/04_create_table_2307_to_2402_view.sql similarity index 97% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/04_create_table_2307_to_2402_view.sql rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/04_create_table_2307_to_2402_view.sql index 947e80f..3d74282 100644 --- a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/04_create_table_2307_to_2402_view.sql +++ b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/04_create_table_2307_to_2402_view.sql @@ -1,2145 +1,2145 @@ -set distributed_ddl_task_timeout = 180; - --- 创建同步源表同步2402临时表物化视图, 七个表 - --- tsg_galaxy_v3.session_record_local -CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.session_record_local_2307_to_2402_view on cluster ck_cluster -TO tsg_galaxy_v3.session_record_local -( - recv_time Int64, - log_id UInt64, - decoded_as String, - session_id UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int32, - tcp_handshake_latency_ms Nullable(Int32), - ingestion_time Int64, - processing_time Int64, - -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), - device_id String, - out_link_id Nullable(Int32), - in_link_id Nullable(Int32), - device_tag String, - data_center String, - device_group String, - sled_ip String, - address_type Int32, - vsys_id Int32, - t_vsys_id Int32, - flags Int64, - flags_identify_info String, - -- security_rule_list Array(Int64), - -- security_action String, - -- monitor_rule_list Array(Int64), - shaping_rule_list Array(Int64), - -- proxy_rule_list Array(Int64), - -- statistics_rule_list Array(Int64), - -- sc_rule_list Array(Int64), - -- sc_rsp_raw Array(Int64), - -- sc_rsp_decrypted Array(Int64), - -- proxy_action String, - -- proxy_pinning_status Nullable(Int32), - -- proxy_intercept_status Nullable(Int32), - -- proxy_passthrough_reason String, - -- proxy_client_side_latency_ms Nullable(Int32), - -- proxy_server_side_latency_ms Nullable(Int32), - -- proxy_client_side_version String, - -- proxy_server_side_version String, - -- proxy_cert_verify Nullable(Int32), - -- proxy_intercept_error String, - monitor_mirrored_pkts Nullable(Int32), - monitor_mirrored_bytes Nullable(Int32), - client_ip String, - client_port Int32, - -- client_os_desc String, - client_geolocation LowCardinality(String), - client_asn Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - -- apn String, - server_ip String, - server_port Int32, - -- server_os_desc String, - server_geolocation LowCardinality(String), - server_asn Nullable(Int64), - server_fqdn String, - server_domain String, - app_transition String, - app LowCardinality(String), - -- app_debug_info String, - -- app_content String, - fqdn_category_list Array(Int64), - -- ip_protocol LowCardinality(String), - decoded_path LowCardinality(String), - dns_message_id Nullable(Int32), - dns_qr Nullable(Int32), - dns_opcode Nullable(Int32), - dns_aa Nullable(Int32), - dns_tc Nullable(Int32), - dns_rd Nullable(Int32), - dns_ra Nullable(Int32), - dns_rcode Nullable(Int32), - dns_qdcount Nullable(Int32), - dns_ancount Nullable(Int32), - dns_nscount Nullable(Int32), - dns_arcount Nullable(Int32), - dns_qname String, - dns_qtype Nullable(Int32), - dns_qclass Nullable(Int32), - dns_cname String, - dns_sub Nullable(Int32), - dns_rr String, - dns_response_latency_ms Nullable(Int32), - http_url String, - http_host String, - http_request_line String, - http_response_line String, - http_request_body String, - http_response_body String, - http_proxy_flag Nullable(Int32), - http_sequence Nullable(Int32), - http_cookie String, - http_referer String, - http_user_agent String, - http_request_content_length Nullable(Int64), - http_request_content_type String, - http_response_content_length Nullable(Int64), - http_response_content_type String, - http_set_cookie String, - http_version String, - -- http_status_code Nullable(Int32), - http_response_latency_ms Nullable(Int32), - http_session_duration_ms Nullable(Int32), - http_action_file_size Nullable(Int64), - ssl_version String, - ssl_sni String, - ssl_san String, - ssl_cn String, - ssl_handshake_latency_ms Nullable(Int32), - ssl_ja3_hash String, - ssl_ja3s_hash String, - ssl_cert_issuer String, - ssl_cert_subject String, - -- ssl_esni_flag Nullable(Int32), - -- ssl_ech_flag Nullable(Int32), - dtls_cookie String, - dtls_version String, - dtls_sni String, - dtls_san String, - dtls_cn String, - dtls_handshake_latency_ms Nullable(Int32), - dtls_ja3_fingerprint String, - dtls_ja3_hash String, - dtls_cert_issuer String, - dtls_cert_subject String, - mail_protocol_type String, - mail_account String, - mail_from_cmd String, - mail_to_cmd String, - mail_from String, - -- mail_password String, - mail_to String, - mail_cc String, - mail_bcc String, - mail_subject String, - mail_subject_charset String, - mail_attachment_name String, - mail_attachment_name_charset String, - mail_eml_file String, - ftp_account String, - ftp_url String, - ftp_link_type String, - quic_version String, - quic_sni String, - quic_user_agent String, - rdp_cookie String, - rdp_security_protocol String, - rdp_client_channels String, - rdp_keyboard_layout String, - rdp_client_version String, - rdp_client_name String, - rdp_client_product_id String, - rdp_desktop_width String, - rdp_desktop_height String, - rdp_requested_color_depth String, - rdp_certificate_type String, - rdp_certificate_count Nullable(Int32), - rdp_certificate_permanent Nullable(Int32), - rdp_encryption_level String, - rdp_encryption_method String, - ssh_version String, - ssh_auth_success String, - ssh_client_version String, - ssh_server_version String, - ssh_cipher_alg String, - ssh_mac_alg String, - ssh_compression_alg String, - ssh_kex_alg String, - ssh_host_key_alg String, - ssh_host_key String, - ssh_hassh String, - sip_call_id String, - sip_originator_description String, - sip_responder_description String, - sip_user_agent String, - sip_server String, - sip_originator_sdp_connect_ip String, - sip_originator_sdp_media_port Nullable(Int32), - sip_originator_sdp_media_type String, - sip_originator_sdp_content String, - sip_responder_sdp_connect_ip String, - sip_responder_sdp_media_port Nullable(Int32), - sip_responder_sdp_media_type String, - sip_responder_sdp_content String, - sip_duration_s Nullable(Int32), - sip_bye String, - rtp_payload_type_c2s Nullable(Int32), - rtp_payload_type_s2c Nullable(Int32), - rtp_pcap_path String, - rtp_originator_dir Nullable(Int32), - stratum_cryptocurrency String, - stratum_mining_pools String, - stratum_mining_program String, - -- stratum_mining_subscribe String, - sent_pkts Int64, - received_pkts Int64, - sent_bytes Int64, - received_bytes Int64, - tcp_c2s_ip_fragments Nullable(Int64), - tcp_s2c_ip_fragments Nullable(Int64), - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_rtt_ms Nullable(Int32), - tcp_client_isn Nullable(Int64), - tcp_server_isn Nullable(Int64), - packet_capture_file String, - in_src_mac String, - out_src_mac String, - in_dest_mac String, - out_dest_mac String, - encapsulation String, - dup_traffic_flag Nullable(Int32), - tunnel_endpoint_a_desc String, - tunnel_endpoint_b_desc String -) -AS -SELECT - common_recv_time as recv_time, - common_log_id as log_id, - common_schema_type as decoded_as, - common_stream_trace_id as session_id, - common_start_timestamp_ms as start_timestamp_ms, - common_end_timestamp_ms as end_timestamp_ms, - common_con_duration_ms as duration_ms, - common_establish_latency_ms as tcp_handshake_latency_ms, - common_ingestion_time as ingestion_time, - common_processing_time as processing_time, - -- common_insert_time as insert_time, - common_device_id as device_id, - common_egress_link_id as out_link_id, - common_ingress_link_id as in_link_id, - common_device_tag as device_tag, - common_data_center as data_center, - common_device_group as device_group, - common_sled_ip as sled_ip, - common_address_type as address_type, - common_vsys_id as vsys_id, - common_t_vsys_id as t_vsys_id, - common_flags as flags, - common_flags_identify_info as flags_identify_info, - -- as security_rule_list, - -- as security_action, - -- as monitor_rule_list, - common_shaping_rule_ids as shaping_rule_list, - -- as proxy_rule_list, - -- as statistics_rule_list, - -- as sc_rule_list, - -- as sc_rsp_raw, - -- as sc_rsp_decrypted, - -- as proxy_action, - -- as proxy_pinning_status, - -- as proxy_intercept_status, - -- as proxy_passthrough_reason, - -- as proxy_client_side_latency_ms, - -- as proxy_server_side_latency_ms, - -- as proxy_client_side_version, - -- as proxy_server_side_version, - -- as proxy_cert_verify, - -- as proxy_intercept_error, - common_mirrored_pkts as monitor_mirrored_pkts, - common_mirrored_bytes as monitor_mirrored_bytes, - common_client_ip as client_ip, - common_client_port as client_port, - -- common_client_os_name as client_os_desc, - common_client_location as client_geolocation, - common_client_asn as client_asn, - common_subscriber_id as subscriber_id, - common_imei as imei, - common_imsi as imsi, - common_phone_number as phone_number, - -- as apn, - common_server_ip as server_ip, - common_server_port as server_port, - -- common_server_os_name as server_os_desc, - common_server_location as server_geolocation, - common_server_asn as server_asn, - common_server_fqdn as server_fqdn, - common_server_domain as server_domain, - common_app_full_path as app_transition, - common_app_label as app, - -- app_debug_info, - -- common_app_behavior as app_content, - common_service_category as fqdn_category_list, - -- ip_protocol, - common_protocol_label as decoded_path, - dns_message_id as dns_message_id, - dns_qr as dns_qr, - dns_opcode as dns_opcode, - dns_aa as dns_aa, - dns_tc as dns_tc, - dns_rd as dns_rd, - dns_ra as dns_ra, - dns_rcode as dns_rcode, - dns_qdcount as dns_qdcount, - dns_ancount as dns_ancount, - dns_nscount as dns_nscount, - dns_arcount as dns_arcount, - dns_qname as dns_qname, - dns_qtype as dns_qtype, - dns_qclass as dns_qclass, - dns_cname as dns_cname, - dns_sub as dns_sub, - dns_rr as dns_rr, - dns_response_latency_ms as dns_response_latency_ms, - http_url as http_url, - http_host as http_host, - http_request_line as http_request_line, - http_response_line as http_response_line, - http_request_body as http_request_body, - http_response_body as http_response_body, - http_proxy_flag as http_proxy_flag, - http_sequence as http_sequence, - http_cookie as http_cookie, - http_referer as http_referer, - http_user_agent as http_user_agent, - http_request_content_length as http_request_content_length, - http_request_content_type as http_request_content_type, - http_response_content_length as http_response_content_length, - http_response_content_type as http_response_content_type, - http_set_cookie as http_set_cookie, - http_version as http_version, - -- http_status_code as http_status_code, - http_response_latency_ms as http_response_latency_ms, - http_session_duration_ms as http_session_duration_ms, - http_action_file_size as http_action_file_size, - ssl_version as ssl_version, - ssl_sni as ssl_sni, - ssl_san as ssl_san, - ssl_cn as ssl_cn, - ssl_con_latency_ms as ssl_handshake_latency_ms, - ssl_ja3_hash as ssl_ja3_hash, - ssl_ja3s_hash as ssl_ja3s_hash, - ssl_cert_issuer as ssl_cert_issuer, - ssl_cert_subject as ssl_cert_subject, - -- ssl_esni_flag as ssl_esni_flag, - -- ssl_ech_flag as ssl_ech_flag, - dtls_cookie as dtls_cookie, - dtls_version as dtls_version, - dtls_sni as dtls_sni, - dtls_san as dtls_san, - dtls_cn as dtls_cn, - dtls_con_latency_ms as dtls_handshake_latency_ms, - dtls_ja3_fingerprint as dtls_ja3_fingerprint, - dtls_ja3_hash as dtls_ja3_hash, - dtls_cert_issuer as dtls_cert_issuer, - dtls_cert_subject as dtls_cert_subject, - mail_protocol_type as mail_protocol_type, - mail_account as mail_account, - mail_from_cmd as mail_from_cmd, - mail_to_cmd as mail_to_cmd, - mail_from as mail_from, - -- as mail_password, - mail_to as mail_to, - mail_cc as mail_cc, - mail_bcc as mail_bcc, - mail_subject as mail_subject, - mail_subject_charset as mail_subject_charset, - mail_attachment_name as mail_attachment_name, - mail_attachment_name_charset as mail_attachment_name_charset, - mail_eml_file as mail_eml_file, - ftp_account as ftp_account, - ftp_url as ftp_url, - ftp_link_type as ftp_link_type, - quic_version as quic_version, - quic_sni as quic_sni, - quic_user_agent as quic_user_agent, - rdp_cookie as rdp_cookie, - rdp_security_protocol as rdp_security_protocol, - rdp_client_channels as rdp_client_channels, - rdp_keyboard_layout as rdp_keyboard_layout, - rdp_client_version as rdp_client_version, - rdp_client_name as rdp_client_name, - rdp_client_product_id as rdp_client_product_id, - rdp_desktop_width as rdp_desktop_width, - rdp_desktop_height as rdp_desktop_height, - rdp_requested_color_depth as rdp_requested_color_depth, - rdp_certificate_type as rdp_certificate_type, - rdp_certificate_count as rdp_certificate_count, - rdp_certificate_permanent as rdp_certificate_permanent, - rdp_encryption_level as rdp_encryption_level, - rdp_encryption_method as rdp_encryption_method, - ssh_version as ssh_version, - ssh_auth_success as ssh_auth_success, - ssh_client_version as ssh_client_version, - ssh_server_version as ssh_server_version, - ssh_cipher_alg as ssh_cipher_alg, - ssh_mac_alg as ssh_mac_alg, - ssh_compression_alg as ssh_compression_alg, - ssh_kex_alg as ssh_kex_alg, - ssh_host_key_alg as ssh_host_key_alg, - ssh_host_key as ssh_host_key, - ssh_hassh as ssh_hassh, - sip_call_id as sip_call_id, - sip_originator_description as sip_originator_description, - sip_responder_description as sip_responder_description, - sip_user_agent as sip_user_agent, - sip_server as sip_server, - sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, - sip_originator_sdp_media_port as sip_originator_sdp_media_port, - sip_originator_sdp_media_type as sip_originator_sdp_media_type, - sip_originator_sdp_content as sip_originator_sdp_content, - sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, - sip_responder_sdp_media_port as sip_responder_sdp_media_port, - sip_responder_sdp_media_type as sip_responder_sdp_media_type, - sip_responder_sdp_content as sip_responder_sdp_content, - sip_duration_s as sip_duration_s, - sip_bye as sip_bye, - rtp_payload_type_c2s as rtp_payload_type_c2s, - rtp_payload_type_s2c as rtp_payload_type_s2c, - rtp_pcap_path as rtp_pcap_path, - rtp_originator_dir as rtp_originator_dir, - stratum_cryptocurrency as stratum_cryptocurrency, - stratum_mining_pools as stratum_mining_pools, - stratum_mining_program as stratum_mining_program, - -- as stratum_mining_subscribe, - common_c2s_pkt_num as sent_pkts, - common_s2c_pkt_num as received_pkts, - common_c2s_byte_num as sent_bytes, - common_s2c_byte_num as received_bytes, - common_c2s_ipfrag_num as tcp_c2s_ip_fragments, - common_s2c_ipfrag_num as tcp_s2c_ip_fragments, - common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, - common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, - common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, - common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, - common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, - common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, - common_c2s_byte_retrans as tcp_c2s_rtx_bytes, - common_s2c_byte_retrans as tcp_s2c_rtx_bytes, - common_first_ttl as tcp_rtt_ms, - common_tcp_client_isn as tcp_client_isn, - common_tcp_server_isn as tcp_server_isn, - common_packet_capture_file as packet_capture_file, - common_in_src_mac as in_src_mac, - common_out_src_mac as out_src_mac, - common_in_dest_mac as in_dest_mac, - common_out_dest_mac as out_dest_mac, - common_tunnels as encapsulation, - common_has_dup_traffic as dup_traffic_flag, - common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, - common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc -FROM tsg_galaxy_v3.session_record_local_old -; - --- tsg_galaxy_v3.security_event_local -CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.security_event_local_2307_to_security_event_local_2402_view on cluster ck_cluster -TO tsg_galaxy_v3.security_event_local -( - recv_time Int64, - log_id UInt64, - decoded_as String, - session_id UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int32, - tcp_handshake_latency_ms Nullable(Int32), - ingestion_time Int64, - processing_time Int64, - -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), - device_id String, - out_link_id Nullable(Int32), - in_link_id Nullable(Int32), - device_tag String, - data_center String, - device_group String, - sled_ip String, - address_type Int32, - vsys_id Int32, - t_vsys_id Int32, - flags Int64, - flags_identify_info String, - security_rule_list Array(Int64), - security_action String, - monitor_rule_list Array(Int64), - shaping_rule_list Array(Int64), - -- proxy_rule_list Array(Int64), - -- statistics_rule_list Array(Int64), - -- sc_rule_list Array(Int64), - -- sc_rsp_raw Array(Int64), - -- sc_rsp_decrypted Array(Int64), - -- proxy_action String, - -- proxy_pinning_status Nullable(Int32), - -- proxy_intercept_status Nullable(Int32), - -- proxy_passthrough_reason String, - -- proxy_client_side_latency_ms Nullable(Int32), - -- proxy_server_side_latency_ms Nullable(Int32), - -- proxy_client_side_version String, - -- proxy_server_side_version String, - -- proxy_cert_verify Nullable(Int32), - -- proxy_intercept_error String, - monitor_mirrored_pkts Nullable(Int32), - monitor_mirrored_bytes Nullable(Int32), - client_ip String, - client_port Int32, - -- client_os_desc String, - client_geolocation LowCardinality(String), - client_asn Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - -- apn String, - server_ip String, - server_port Int32, - -- server_os_desc String, - server_geolocation LowCardinality(String), - server_asn Nullable(Int64), - server_fqdn String, - server_domain String, - app_transition String, - app LowCardinality(String), - -- app_debug_info String, - -- app_content String, - fqdn_category_list Array(Int64), - -- ip_protocol LowCardinality(String), - decoded_path LowCardinality(String), - dns_message_id Nullable(Int32), - dns_qr Nullable(Int32), - dns_opcode Nullable(Int32), - dns_aa Nullable(Int32), - dns_tc Nullable(Int32), - dns_rd Nullable(Int32), - dns_ra Nullable(Int32), - dns_rcode Nullable(Int32), - dns_qdcount Nullable(Int32), - dns_ancount Nullable(Int32), - dns_nscount Nullable(Int32), - dns_arcount Nullable(Int32), - dns_qname String, - dns_qtype Nullable(Int32), - dns_qclass Nullable(Int32), - dns_cname String, - dns_sub Nullable(Int32), - dns_rr String, - dns_response_latency_ms Nullable(Int32), - http_url String, - http_host String, - http_request_line String, - http_response_line String, - http_request_body String, - http_response_body String, - http_proxy_flag Nullable(Int32), - http_sequence Nullable(Int32), - http_cookie String, - http_referer String, - http_user_agent String, - http_request_content_length Nullable(Int64), - http_request_content_type String, - http_response_content_length Nullable(Int64), - http_response_content_type String, - http_set_cookie String, - http_version String, - -- http_status_code Nullable(Int32), - http_response_latency_ms Nullable(Int32), - http_session_duration_ms Nullable(Int32), - http_action_file_size Nullable(Int64), - ssl_version String, - ssl_sni String, - ssl_san String, - ssl_cn String, - ssl_handshake_latency_ms Nullable(Int32), - ssl_ja3_hash String, - ssl_ja3s_hash String, - ssl_cert_issuer String, - ssl_cert_subject String, - -- ssl_esni_flag Nullable(Int32), - -- ssl_ech_flag Nullable(Int32), - dtls_cookie String, - dtls_version String, - dtls_sni String, - dtls_san String, - dtls_cn String, - dtls_handshake_latency_ms Nullable(Int32), - dtls_ja3_fingerprint String, - dtls_ja3_hash String, - dtls_cert_issuer String, - dtls_cert_subject String, - mail_protocol_type String, - mail_account String, - mail_from_cmd String, - mail_to_cmd String, - mail_from String, - -- mail_password String, - mail_to String, - mail_cc String, - mail_bcc String, - mail_subject String, - mail_subject_charset String, - mail_attachment_name String, - mail_attachment_name_charset String, - mail_eml_file String, - ftp_account String, - ftp_url String, - ftp_link_type String, - quic_version String, - quic_sni String, - quic_user_agent String, - rdp_cookie String, - rdp_security_protocol String, - rdp_client_channels String, - rdp_keyboard_layout String, - rdp_client_version String, - rdp_client_name String, - rdp_client_product_id String, - rdp_desktop_width String, - rdp_desktop_height String, - rdp_requested_color_depth String, - rdp_certificate_type String, - rdp_certificate_count Nullable(Int32), - rdp_certificate_permanent Nullable(Int32), - rdp_encryption_level String, - rdp_encryption_method String, - ssh_version String, - ssh_auth_success String, - ssh_client_version String, - ssh_server_version String, - ssh_cipher_alg String, - ssh_mac_alg String, - ssh_compression_alg String, - ssh_kex_alg String, - ssh_host_key_alg String, - ssh_host_key String, - ssh_hassh String, - sip_call_id String, - sip_originator_description String, - sip_responder_description String, - sip_user_agent String, - sip_server String, - sip_originator_sdp_connect_ip String, - sip_originator_sdp_media_port Nullable(Int32), - sip_originator_sdp_media_type String, - sip_originator_sdp_content String, - sip_responder_sdp_connect_ip String, - sip_responder_sdp_media_port Nullable(Int32), - sip_responder_sdp_media_type String, - sip_responder_sdp_content String, - sip_duration_s Nullable(Int32), - sip_bye String, - rtp_payload_type_c2s Nullable(Int32), - rtp_payload_type_s2c Nullable(Int32), - rtp_pcap_path String, - rtp_originator_dir Nullable(Int32), - stratum_cryptocurrency String, - stratum_mining_pools String, - stratum_mining_program String, - -- stratum_mining_subscribe String, - sent_pkts Int64, - received_pkts Int64, - sent_bytes Int64, - received_bytes Int64, - tcp_c2s_ip_fragments Nullable(Int64), - tcp_s2c_ip_fragments Nullable(Int64), - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_rtt_ms Nullable(Int32), - tcp_client_isn Nullable(Int64), - tcp_server_isn Nullable(Int64), - packet_capture_file String, - in_src_mac String, - out_src_mac String, - in_dest_mac String, - out_dest_mac String, - encapsulation String, - dup_traffic_flag Nullable(Int32), - tunnel_endpoint_a_desc String, - tunnel_endpoint_b_desc String -) -AS -SELECT - common_recv_time as recv_time, - common_log_id as log_id, - common_schema_type as decoded_as, - common_stream_trace_id as session_id, - common_start_timestamp_ms as start_timestamp_ms, - common_end_timestamp_ms as end_timestamp_ms, - common_con_duration_ms as duration_ms, - common_establish_latency_ms as tcp_handshake_latency_ms, - common_ingestion_time as ingestion_time, - common_processing_time as processing_time, - -- common_insert_time as insert_time, - common_device_id as device_id, - common_egress_link_id as out_link_id, - common_ingress_link_id as in_link_id, - common_device_tag as device_tag, - common_data_center as data_center, - common_device_group as device_group, - common_sled_ip as sled_ip, - common_address_type as address_type, - common_vsys_id as vsys_id, - common_t_vsys_id as t_vsys_id, - common_flags as flags, - common_flags_identify_info as flags_identify_info, - if(common_action in (16, 96), array(common_policy_id), array()) as security_rule_list, -- in(Deny、Allow) array(common_policy_id) 安全表 - case common_action - when 16 then 'Deny' - when 96 then 'Allow' - else '' - end as security_action, -- Deny16、Allow96 else '' - if(common_action = 1, array(common_policy_id), array()) as monitor_rule_list, -- 是Monitor(1) 放common_policy_id - common_shaping_rule_ids as shaping_rule_list, - -- as proxy_rule_list, - -- as statistics_rule_list, - -- as sc_rule_list, - -- as sc_rsp_raw, - -- as sc_rsp_decrypted, - -- as proxy_action, - -- as proxy_pinning_status, - -- as proxy_intercept_status, - -- as proxy_passthrough_reason, - -- as proxy_client_side_latency_ms, - -- as proxy_server_side_latency_ms, - -- as proxy_client_side_version, - -- as proxy_server_side_version, - -- as proxy_cert_verify, - -- as proxy_intercept_error, - common_mirrored_pkts as monitor_mirrored_pkts, - common_mirrored_bytes as monitor_mirrored_bytes, - common_client_ip as client_ip, - common_client_port as client_port, - -- common_client_os_name as client_os_desc, - common_client_location as client_geolocation, - common_client_asn as client_asn, - common_subscriber_id as subscriber_id, - common_imei as imei, - common_imsi as imsi, - common_phone_number as phone_number, - -- as apn, - common_server_ip as server_ip, - common_server_port as server_port, - -- common_server_os_name as server_os_desc, - common_server_location as server_geolocation, - common_server_asn as server_asn, - common_server_fqdn as server_fqdn, - common_server_domain as server_domain, - common_app_full_path as app_transition, - common_app_label as app, - -- app_debug_info, - -- common_app_behavior as app_content, - common_service_category as fqdn_category_list, - -- ip_protocol, - common_protocol_label as decoded_path, - dns_message_id as dns_message_id, - dns_qr as dns_qr, - dns_opcode as dns_opcode, - dns_aa as dns_aa, - dns_tc as dns_tc, - dns_rd as dns_rd, - dns_ra as dns_ra, - dns_rcode as dns_rcode, - dns_qdcount as dns_qdcount, - dns_ancount as dns_ancount, - dns_nscount as dns_nscount, - dns_arcount as dns_arcount, - dns_qname as dns_qname, - dns_qtype as dns_qtype, - dns_qclass as dns_qclass, - dns_cname as dns_cname, - dns_sub as dns_sub, - dns_rr as dns_rr, - dns_response_latency_ms as dns_response_latency_ms, - http_url as http_url, - http_host as http_host, - http_request_line as http_request_line, - http_response_line as http_response_line, - http_request_body as http_request_body, - http_response_body as http_response_body, - http_proxy_flag as http_proxy_flag, - http_sequence as http_sequence, - http_cookie as http_cookie, - http_referer as http_referer, - http_user_agent as http_user_agent, - http_request_content_length as http_request_content_length, - http_request_content_type as http_request_content_type, - http_response_content_length as http_response_content_length, - http_response_content_type as http_response_content_type, - http_set_cookie as http_set_cookie, - http_version as http_version, - -- http_status_code as http_status_code, - http_response_latency_ms as http_response_latency_ms, - http_session_duration_ms as http_session_duration_ms, - http_action_file_size as http_action_file_size, - ssl_version as ssl_version, - ssl_sni as ssl_sni, - ssl_san as ssl_san, - ssl_cn as ssl_cn, - ssl_con_latency_ms as ssl_handshake_latency_ms, - ssl_ja3_hash as ssl_ja3_hash, - ssl_ja3s_hash as ssl_ja3s_hash, - ssl_cert_issuer as ssl_cert_issuer, - ssl_cert_subject as ssl_cert_subject, - -- ssl_esni_flag as ssl_esni_flag, - -- ssl_ech_flag as ssl_ech_flag, - dtls_cookie as dtls_cookie, - dtls_version as dtls_version, - dtls_sni as dtls_sni, - dtls_san as dtls_san, - dtls_cn as dtls_cn, - dtls_con_latency_ms as dtls_handshake_latency_ms, - dtls_ja3_fingerprint as dtls_ja3_fingerprint, - dtls_ja3_hash as dtls_ja3_hash, - dtls_cert_issuer as dtls_cert_issuer, - dtls_cert_subject as dtls_cert_subject, - mail_protocol_type as mail_protocol_type, - mail_account as mail_account, - mail_from_cmd as mail_from_cmd, - mail_to_cmd as mail_to_cmd, - mail_from as mail_from, - -- as mail_password, - mail_to as mail_to, - mail_cc as mail_cc, - mail_bcc as mail_bcc, - mail_subject as mail_subject, - mail_subject_charset as mail_subject_charset, - mail_attachment_name as mail_attachment_name, - mail_attachment_name_charset as mail_attachment_name_charset, - mail_eml_file as mail_eml_file, - ftp_account as ftp_account, - ftp_url as ftp_url, - ftp_link_type as ftp_link_type, - quic_version as quic_version, - quic_sni as quic_sni, - quic_user_agent as quic_user_agent, - rdp_cookie as rdp_cookie, - rdp_security_protocol as rdp_security_protocol, - rdp_client_channels as rdp_client_channels, - rdp_keyboard_layout as rdp_keyboard_layout, - rdp_client_version as rdp_client_version, - rdp_client_name as rdp_client_name, - rdp_client_product_id as rdp_client_product_id, - rdp_desktop_width as rdp_desktop_width, - rdp_desktop_height as rdp_desktop_height, - rdp_requested_color_depth as rdp_requested_color_depth, - rdp_certificate_type as rdp_certificate_type, - rdp_certificate_count as rdp_certificate_count, - rdp_certificate_permanent as rdp_certificate_permanent, - rdp_encryption_level as rdp_encryption_level, - rdp_encryption_method as rdp_encryption_method, - ssh_version as ssh_version, - ssh_auth_success as ssh_auth_success, - ssh_client_version as ssh_client_version, - ssh_server_version as ssh_server_version, - ssh_cipher_alg as ssh_cipher_alg, - ssh_mac_alg as ssh_mac_alg, - ssh_compression_alg as ssh_compression_alg, - ssh_kex_alg as ssh_kex_alg, - ssh_host_key_alg as ssh_host_key_alg, - ssh_host_key as ssh_host_key, - ssh_hassh as ssh_hassh, - sip_call_id as sip_call_id, - sip_originator_description as sip_originator_description, - sip_responder_description as sip_responder_description, - sip_user_agent as sip_user_agent, - sip_server as sip_server, - sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, - sip_originator_sdp_media_port as sip_originator_sdp_media_port, - sip_originator_sdp_media_type as sip_originator_sdp_media_type, - sip_originator_sdp_content as sip_originator_sdp_content, - sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, - sip_responder_sdp_media_port as sip_responder_sdp_media_port, - sip_responder_sdp_media_type as sip_responder_sdp_media_type, - sip_responder_sdp_content as sip_responder_sdp_content, - sip_duration_s as sip_duration_s, - sip_bye as sip_bye, - rtp_payload_type_c2s as rtp_payload_type_c2s, - rtp_payload_type_s2c as rtp_payload_type_s2c, - rtp_pcap_path as rtp_pcap_path, - rtp_originator_dir as rtp_originator_dir, - stratum_cryptocurrency as stratum_cryptocurrency, - stratum_mining_pools as stratum_mining_pools, - stratum_mining_program as stratum_mining_program, - -- as stratum_mining_subscribe, - common_c2s_pkt_num as sent_pkts, - common_s2c_pkt_num as received_pkts, - common_c2s_byte_num as sent_bytes, - common_s2c_byte_num as received_bytes, - common_c2s_ipfrag_num as tcp_c2s_ip_fragments, - common_s2c_ipfrag_num as tcp_s2c_ip_fragments, - common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, - common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, - common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, - common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, - common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, - common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, - common_c2s_byte_retrans as tcp_c2s_rtx_bytes, - common_s2c_byte_retrans as tcp_s2c_rtx_bytes, - common_first_ttl as tcp_rtt_ms, - common_tcp_client_isn as tcp_client_isn, - common_tcp_server_isn as tcp_server_isn, - common_packet_capture_file as packet_capture_file, - common_in_src_mac as in_src_mac, - common_out_src_mac as out_src_mac, - common_in_dest_mac as in_dest_mac, - common_out_dest_mac as out_dest_mac, - common_tunnels as encapsulation, - common_has_dup_traffic as dup_traffic_flag, - common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, - common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc -FROM tsg_galaxy_v3.security_event_local_old -where common_action in (16, 96) -; - --- tsg_galaxy_v3.monitor_event_local -CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.security_event_local_2307_to_monitor_event_local_2402_view on cluster ck_cluster -TO tsg_galaxy_v3.monitor_event_local -( - recv_time Int64, - log_id UInt64, - decoded_as String, - session_id UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int32, - tcp_handshake_latency_ms Nullable(Int32), - ingestion_time Int64, - processing_time Int64, - -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), - device_id String, - out_link_id Nullable(Int32), - in_link_id Nullable(Int32), - device_tag String, - data_center String, - device_group String, - sled_ip String, - address_type Int32, - vsys_id Int32, - t_vsys_id Int32, - flags Int64, - flags_identify_info String, - security_rule_list Array(Int64), - security_action String, - monitor_rule_list Array(Int64), - shaping_rule_list Array(Int64), - -- proxy_rule_list Array(Int64), - -- statistics_rule_list Array(Int64), - -- sc_rule_list Array(Int64), - -- sc_rsp_raw Array(Int64), - -- sc_rsp_decrypted Array(Int64), - -- proxy_action String, - -- proxy_pinning_status Nullable(Int32), - -- proxy_intercept_status Nullable(Int32), - -- proxy_passthrough_reason String, - -- proxy_client_side_latency_ms Nullable(Int32), - -- proxy_server_side_latency_ms Nullable(Int32), - -- proxy_client_side_version String, - -- proxy_server_side_version String, - -- proxy_cert_verify Nullable(Int32), - -- proxy_intercept_error String, - monitor_mirrored_pkts Nullable(Int32), - monitor_mirrored_bytes Nullable(Int32), - client_ip String, - client_port Int32, - -- client_os_desc String, - client_geolocation LowCardinality(String), - client_asn Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - -- apn String, - server_ip String, - server_port Int32, - -- server_os_desc String, - server_geolocation LowCardinality(String), - server_asn Nullable(Int64), - server_fqdn String, - server_domain String, - app_transition String, - app LowCardinality(String), - -- app_debug_info String, - -- app_content String, - fqdn_category_list Array(Int64), - -- ip_protocol LowCardinality(String), - decoded_path LowCardinality(String), - dns_message_id Nullable(Int32), - dns_qr Nullable(Int32), - dns_opcode Nullable(Int32), - dns_aa Nullable(Int32), - dns_tc Nullable(Int32), - dns_rd Nullable(Int32), - dns_ra Nullable(Int32), - dns_rcode Nullable(Int32), - dns_qdcount Nullable(Int32), - dns_ancount Nullable(Int32), - dns_nscount Nullable(Int32), - dns_arcount Nullable(Int32), - dns_qname String, - dns_qtype Nullable(Int32), - dns_qclass Nullable(Int32), - dns_cname String, - dns_sub Nullable(Int32), - dns_rr String, - dns_response_latency_ms Nullable(Int32), - http_url String, - http_host String, - http_request_line String, - http_response_line String, - http_request_body String, - http_response_body String, - http_proxy_flag Nullable(Int32), - http_sequence Nullable(Int32), - http_cookie String, - http_referer String, - http_user_agent String, - http_request_content_length Nullable(Int64), - http_request_content_type String, - http_response_content_length Nullable(Int64), - http_response_content_type String, - http_set_cookie String, - http_version String, - -- http_status_code Nullable(Int32), - http_response_latency_ms Nullable(Int32), - http_session_duration_ms Nullable(Int32), - http_action_file_size Nullable(Int64), - ssl_version String, - ssl_sni String, - ssl_san String, - ssl_cn String, - ssl_handshake_latency_ms Nullable(Int32), - ssl_ja3_hash String, - ssl_ja3s_hash String, - ssl_cert_issuer String, - ssl_cert_subject String, - -- ssl_esni_flag Nullable(Int32), - -- ssl_ech_flag Nullable(Int32), - dtls_cookie String, - dtls_version String, - dtls_sni String, - dtls_san String, - dtls_cn String, - dtls_handshake_latency_ms Nullable(Int32), - dtls_ja3_fingerprint String, - dtls_ja3_hash String, - dtls_cert_issuer String, - dtls_cert_subject String, - mail_protocol_type String, - mail_account String, - mail_from_cmd String, - mail_to_cmd String, - mail_from String, - -- mail_password String, - mail_to String, - mail_cc String, - mail_bcc String, - mail_subject String, - mail_subject_charset String, - mail_attachment_name String, - mail_attachment_name_charset String, - mail_eml_file String, - ftp_account String, - ftp_url String, - ftp_link_type String, - quic_version String, - quic_sni String, - quic_user_agent String, - rdp_cookie String, - rdp_security_protocol String, - rdp_client_channels String, - rdp_keyboard_layout String, - rdp_client_version String, - rdp_client_name String, - rdp_client_product_id String, - rdp_desktop_width String, - rdp_desktop_height String, - rdp_requested_color_depth String, - rdp_certificate_type String, - rdp_certificate_count Nullable(Int32), - rdp_certificate_permanent Nullable(Int32), - rdp_encryption_level String, - rdp_encryption_method String, - ssh_version String, - ssh_auth_success String, - ssh_client_version String, - ssh_server_version String, - ssh_cipher_alg String, - ssh_mac_alg String, - ssh_compression_alg String, - ssh_kex_alg String, - ssh_host_key_alg String, - ssh_host_key String, - ssh_hassh String, - sip_call_id String, - sip_originator_description String, - sip_responder_description String, - sip_user_agent String, - sip_server String, - sip_originator_sdp_connect_ip String, - sip_originator_sdp_media_port Nullable(Int32), - sip_originator_sdp_media_type String, - sip_originator_sdp_content String, - sip_responder_sdp_connect_ip String, - sip_responder_sdp_media_port Nullable(Int32), - sip_responder_sdp_media_type String, - sip_responder_sdp_content String, - sip_duration_s Nullable(Int32), - sip_bye String, - rtp_payload_type_c2s Nullable(Int32), - rtp_payload_type_s2c Nullable(Int32), - rtp_pcap_path String, - rtp_originator_dir Nullable(Int32), - stratum_cryptocurrency String, - stratum_mining_pools String, - stratum_mining_program String, - -- stratum_mining_subscribe String, - sent_pkts Int64, - received_pkts Int64, - sent_bytes Int64, - received_bytes Int64, - tcp_c2s_ip_fragments Nullable(Int64), - tcp_s2c_ip_fragments Nullable(Int64), - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_rtt_ms Nullable(Int32), - tcp_client_isn Nullable(Int64), - tcp_server_isn Nullable(Int64), - packet_capture_file String, - in_src_mac String, - out_src_mac String, - in_dest_mac String, - out_dest_mac String, - encapsulation String, - dup_traffic_flag Nullable(Int32), - tunnel_endpoint_a_desc String, - tunnel_endpoint_b_desc String -) -AS -SELECT - common_recv_time as recv_time, - common_log_id as log_id, - common_schema_type as decoded_as, - common_stream_trace_id as session_id, - common_start_timestamp_ms as start_timestamp_ms, - common_end_timestamp_ms as end_timestamp_ms, - common_con_duration_ms as duration_ms, - common_establish_latency_ms as tcp_handshake_latency_ms, - common_ingestion_time as ingestion_time, - common_processing_time as processing_time, - -- common_insert_time as insert_time, - common_device_id as device_id, - common_egress_link_id as out_link_id, - common_ingress_link_id as in_link_id, - common_device_tag as device_tag, - common_data_center as data_center, - common_device_group as device_group, - common_sled_ip as sled_ip, - common_address_type as address_type, - common_vsys_id as vsys_id, - common_t_vsys_id as t_vsys_id, - common_flags as flags, - common_flags_identify_info as flags_identify_info, - if(common_action in (16, 96), array(common_policy_id), array()) as security_rule_list, -- in(Deny、Allow) array(common_policy_id) 安全表 - case common_action - when 16 then 'Deny' - when 96 then 'Allow' - else '' - end as security_action, -- Deny16、Allow96 else '' - if(common_action = 1, array(common_policy_id), array()) as monitor_rule_list, -- 是Monitor(1) 放common_policy_id - common_shaping_rule_ids as shaping_rule_list, - -- as proxy_rule_list, - -- as statistics_rule_list, - -- as sc_rule_list, - -- as sc_rsp_raw, - -- as sc_rsp_decrypted, - -- as proxy_action, - -- as proxy_pinning_status, - -- as proxy_intercept_status, - -- as proxy_passthrough_reason, - -- as proxy_client_side_latency_ms, - -- as proxy_server_side_latency_ms, - -- as proxy_client_side_version, - -- as proxy_server_side_version, - -- as proxy_cert_verify, - -- as proxy_intercept_error, - common_mirrored_pkts as monitor_mirrored_pkts, - common_mirrored_bytes as monitor_mirrored_bytes, - common_client_ip as client_ip, - common_client_port as client_port, - -- common_client_os_name as client_os_desc, - common_client_location as client_geolocation, - common_client_asn as client_asn, - common_subscriber_id as subscriber_id, - common_imei as imei, - common_imsi as imsi, - common_phone_number as phone_number, - -- as apn, - common_server_ip as server_ip, - common_server_port as server_port, - -- common_server_os_name as server_os_desc, - common_server_location as server_geolocation, - common_server_asn as server_asn, - common_server_fqdn as server_fqdn, - common_server_domain as server_domain, - common_app_full_path as app_transition, - common_app_label as app, - -- app_debug_info, - -- common_app_behavior as app_content, - common_service_category as fqdn_category_list, - -- ip_protocol, - common_protocol_label as decoded_path, - dns_message_id as dns_message_id, - dns_qr as dns_qr, - dns_opcode as dns_opcode, - dns_aa as dns_aa, - dns_tc as dns_tc, - dns_rd as dns_rd, - dns_ra as dns_ra, - dns_rcode as dns_rcode, - dns_qdcount as dns_qdcount, - dns_ancount as dns_ancount, - dns_nscount as dns_nscount, - dns_arcount as dns_arcount, - dns_qname as dns_qname, - dns_qtype as dns_qtype, - dns_qclass as dns_qclass, - dns_cname as dns_cname, - dns_sub as dns_sub, - dns_rr as dns_rr, - dns_response_latency_ms as dns_response_latency_ms, - http_url as http_url, - http_host as http_host, - http_request_line as http_request_line, - http_response_line as http_response_line, - http_request_body as http_request_body, - http_response_body as http_response_body, - http_proxy_flag as http_proxy_flag, - http_sequence as http_sequence, - http_cookie as http_cookie, - http_referer as http_referer, - http_user_agent as http_user_agent, - http_request_content_length as http_request_content_length, - http_request_content_type as http_request_content_type, - http_response_content_length as http_response_content_length, - http_response_content_type as http_response_content_type, - http_set_cookie as http_set_cookie, - http_version as http_version, - -- http_status_code as http_status_code, - http_response_latency_ms as http_response_latency_ms, - http_session_duration_ms as http_session_duration_ms, - http_action_file_size as http_action_file_size, - ssl_version as ssl_version, - ssl_sni as ssl_sni, - ssl_san as ssl_san, - ssl_cn as ssl_cn, - ssl_con_latency_ms as ssl_handshake_latency_ms, - ssl_ja3_hash as ssl_ja3_hash, - ssl_ja3s_hash as ssl_ja3s_hash, - ssl_cert_issuer as ssl_cert_issuer, - ssl_cert_subject as ssl_cert_subject, - -- ssl_esni_flag as ssl_esni_flag, - -- ssl_ech_flag as ssl_ech_flag, - dtls_cookie as dtls_cookie, - dtls_version as dtls_version, - dtls_sni as dtls_sni, - dtls_san as dtls_san, - dtls_cn as dtls_cn, - dtls_con_latency_ms as dtls_handshake_latency_ms, - dtls_ja3_fingerprint as dtls_ja3_fingerprint, - dtls_ja3_hash as dtls_ja3_hash, - dtls_cert_issuer as dtls_cert_issuer, - dtls_cert_subject as dtls_cert_subject, - mail_protocol_type as mail_protocol_type, - mail_account as mail_account, - mail_from_cmd as mail_from_cmd, - mail_to_cmd as mail_to_cmd, - mail_from as mail_from, - -- as mail_password, - mail_to as mail_to, - mail_cc as mail_cc, - mail_bcc as mail_bcc, - mail_subject as mail_subject, - mail_subject_charset as mail_subject_charset, - mail_attachment_name as mail_attachment_name, - mail_attachment_name_charset as mail_attachment_name_charset, - mail_eml_file as mail_eml_file, - ftp_account as ftp_account, - ftp_url as ftp_url, - ftp_link_type as ftp_link_type, - quic_version as quic_version, - quic_sni as quic_sni, - quic_user_agent as quic_user_agent, - rdp_cookie as rdp_cookie, - rdp_security_protocol as rdp_security_protocol, - rdp_client_channels as rdp_client_channels, - rdp_keyboard_layout as rdp_keyboard_layout, - rdp_client_version as rdp_client_version, - rdp_client_name as rdp_client_name, - rdp_client_product_id as rdp_client_product_id, - rdp_desktop_width as rdp_desktop_width, - rdp_desktop_height as rdp_desktop_height, - rdp_requested_color_depth as rdp_requested_color_depth, - rdp_certificate_type as rdp_certificate_type, - rdp_certificate_count as rdp_certificate_count, - rdp_certificate_permanent as rdp_certificate_permanent, - rdp_encryption_level as rdp_encryption_level, - rdp_encryption_method as rdp_encryption_method, - ssh_version as ssh_version, - ssh_auth_success as ssh_auth_success, - ssh_client_version as ssh_client_version, - ssh_server_version as ssh_server_version, - ssh_cipher_alg as ssh_cipher_alg, - ssh_mac_alg as ssh_mac_alg, - ssh_compression_alg as ssh_compression_alg, - ssh_kex_alg as ssh_kex_alg, - ssh_host_key_alg as ssh_host_key_alg, - ssh_host_key as ssh_host_key, - ssh_hassh as ssh_hassh, - sip_call_id as sip_call_id, - sip_originator_description as sip_originator_description, - sip_responder_description as sip_responder_description, - sip_user_agent as sip_user_agent, - sip_server as sip_server, - sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, - sip_originator_sdp_media_port as sip_originator_sdp_media_port, - sip_originator_sdp_media_type as sip_originator_sdp_media_type, - sip_originator_sdp_content as sip_originator_sdp_content, - sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, - sip_responder_sdp_media_port as sip_responder_sdp_media_port, - sip_responder_sdp_media_type as sip_responder_sdp_media_type, - sip_responder_sdp_content as sip_responder_sdp_content, - sip_duration_s as sip_duration_s, - sip_bye as sip_bye, - rtp_payload_type_c2s as rtp_payload_type_c2s, - rtp_payload_type_s2c as rtp_payload_type_s2c, - rtp_pcap_path as rtp_pcap_path, - rtp_originator_dir as rtp_originator_dir, - stratum_cryptocurrency as stratum_cryptocurrency, - stratum_mining_pools as stratum_mining_pools, - stratum_mining_program as stratum_mining_program, - -- as stratum_mining_subscribe, - common_c2s_pkt_num as sent_pkts, - common_s2c_pkt_num as received_pkts, - common_c2s_byte_num as sent_bytes, - common_s2c_byte_num as received_bytes, - common_c2s_ipfrag_num as tcp_c2s_ip_fragments, - common_s2c_ipfrag_num as tcp_s2c_ip_fragments, - common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, - common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, - common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, - common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, - common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, - common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, - common_c2s_byte_retrans as tcp_c2s_rtx_bytes, - common_s2c_byte_retrans as tcp_s2c_rtx_bytes, - common_first_ttl as tcp_rtt_ms, - common_tcp_client_isn as tcp_client_isn, - common_tcp_server_isn as tcp_server_isn, - common_packet_capture_file as packet_capture_file, - common_in_src_mac as in_src_mac, - common_out_src_mac as out_src_mac, - common_in_dest_mac as in_dest_mac, - common_out_dest_mac as out_dest_mac, - common_tunnels as encapsulation, - common_has_dup_traffic as dup_traffic_flag, - common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, - common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc -FROM tsg_galaxy_v3.security_event_local_old -where common_action = 1 -; - --- tsg_galaxy_v3.transaction_record_local -CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.transaction_record_local_2307_to_2402_view on cluster ck_cluster -TO tsg_galaxy_v3.transaction_record_local -( - recv_time Int64, - log_id UInt64, - decoded_as String, - session_id UInt64, - ingestion_time Int64, - processing_time Int64, - -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), - address_type Int32, - vsys_id Int32, - client_ip String, - client_port Int32, - server_ip String, - server_port Int32, - sent_pkts Int64, - received_pkts Int64, - sent_bytes Int64, - received_bytes Int64, - dns_message_id Nullable(Int32), - dns_qr Nullable(Int32), - dns_opcode Nullable(Int32), - dns_aa Nullable(Int32), - dns_tc Nullable(Int32), - dns_rd Nullable(Int32), - dns_ra Nullable(Int32), - dns_rcode Nullable(Int32), - dns_qdcount Nullable(Int32), - dns_ancount Nullable(Int32), - dns_nscount Nullable(Int32), - dns_arcount Nullable(Int32), - dns_qname String, - dns_qtype Nullable(Int32), - dns_qclass Nullable(Int32), - dns_cname String, - dns_sub Nullable(Int32), - dns_rr String, - dns_response_latency_ms Nullable(Int32), - http_url String, - http_host String, - http_request_line String, - http_response_line String, - http_request_body String, - http_response_body String, - http_proxy_flag Nullable(Int32), - http_sequence Nullable(Int32), - http_cookie String, - http_referer String, - http_user_agent String, - http_request_content_length Nullable(Int64), - http_request_content_type String, - http_response_content_length Nullable(Int64), - http_response_content_type String, - http_set_cookie String, - http_version String, - -- http_status_code Nullable(Int32), - http_response_latency_ms Nullable(Int32), - http_session_duration_ms Nullable(Int32), - http_action_file_size Nullable(Int64), - -- mail_protocol_type String, - -- mail_account String, - -- mail_from_cmd String, - -- mail_to_cmd String, - -- mail_from String, - -- mail_password String, - -- mail_to String, - -- mail_cc String, - -- mail_bcc String, - -- mail_subject String, - -- mail_subject_charset String, - -- mail_attachment_name String, - -- mail_attachment_name_charset String, - -- mail_eml_file String, - sip_call_id String, - sip_originator_description String, - sip_responder_description String, - sip_user_agent String, - sip_server String, - sip_originator_sdp_connect_ip String, - sip_originator_sdp_media_port Nullable(Int32), - sip_originator_sdp_media_type String, - sip_originator_sdp_content String, - sip_responder_sdp_connect_ip String, - sip_responder_sdp_media_port Nullable(Int32), - sip_responder_sdp_media_type String, - sip_responder_sdp_content String, - sip_duration_s Nullable(Int32), - sip_bye String -) -AS -SELECT - common_recv_time as recv_time, - common_log_id as log_id, - common_schema_type as decoded_as, - common_stream_trace_id as session_id, - common_ingestion_time as ingestion_time, - common_processing_time as processing_time, - -- common_insert_time as insert_time, - common_address_type as address_type, - common_vsys_id as vsys_id, - common_client_ip as client_ip, - common_client_port as client_port, - common_server_ip as server_ip, - common_server_port as server_port, - common_c2s_pkt_num as sent_pkts, - common_s2c_pkt_num as received_pkts, - common_c2s_byte_num as sent_bytes, - common_s2c_byte_num as received_bytes, - dns_message_id as dns_message_id, - dns_qr as dns_qr, - dns_opcode as dns_opcode, - dns_aa as dns_aa, - dns_tc as dns_tc, - dns_rd as dns_rd, - dns_ra as dns_ra, - dns_rcode as dns_rcode, - dns_qdcount as dns_qdcount, - dns_ancount as dns_ancount, - dns_nscount as dns_nscount, - dns_arcount as dns_arcount, - dns_qname as dns_qname, - dns_qtype as dns_qtype, - dns_qclass as dns_qclass, - dns_cname as dns_cname, - dns_sub as dns_sub, - dns_rr as dns_rr, - dns_response_latency_ms as dns_response_latency_ms, - http_url as http_url, - http_host as http_host, - http_request_line as http_request_line, - http_response_line as http_response_line, - http_request_body as http_request_body, - http_response_body as http_response_body, - http_proxy_flag as http_proxy_flag, - http_sequence as http_sequence, - http_cookie as http_cookie, - http_referer as http_referer, - http_user_agent as http_user_agent, - http_request_content_length as http_request_content_length, - http_request_content_type as http_request_content_type, - http_response_content_length as http_response_content_length, - http_response_content_type as http_response_content_type, - http_set_cookie as http_set_cookie, - http_version as http_version, - -- http_status_code as http_status_code, - http_response_latency_ms as http_response_latency_ms, - http_session_duration_ms as http_session_duration_ms, - http_action_file_size as http_action_file_size, - -- as mail_protocol_type, - -- as mail_account, - -- as mail_from_cmd, - -- as mail_to_cmd, - -- as mail_from, - -- as mail_password, - -- as mail_to, - -- as mail_cc, - -- as mail_bcc, - -- as mail_subject, - -- as mail_subject_charset, - -- as mail_attachment_name, - -- as mail_attachment_name_charset, - -- as mail_eml_file, - sip_call_id as sip_call_id, - sip_originator_description as sip_originator_description, - sip_responder_description as sip_responder_description, - sip_user_agent as sip_user_agent, - sip_server as sip_server, - sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, - sip_originator_sdp_media_port as sip_originator_sdp_media_port, - sip_originator_sdp_media_type as sip_originator_sdp_media_type, - sip_originator_sdp_content as sip_originator_sdp_content, - sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, - sip_responder_sdp_media_port as sip_responder_sdp_media_port, - sip_responder_sdp_media_type as sip_responder_sdp_media_type, - sip_responder_sdp_content as sip_responder_sdp_content, - sip_duration_s as sip_duration_s, - sip_bye as sip_bye -FROM tsg_galaxy_v3.transaction_record_local_old -; - --- tsg_galaxy_v3.voip_record_local -CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.voip_record_local_2307_to_2402_view on cluster ck_cluster -TO tsg_galaxy_v3.voip_record_local -( - recv_time Int64, - log_id UInt64, - decoded_as String, - session_id UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int32, - tcp_handshake_latency_ms Nullable(Int32), - ingestion_time Int64, - processing_time Int64, - -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), - device_id String, - out_link_id Nullable(Int32), - in_link_id Nullable(Int32), - device_tag String, - data_center String, - device_group String, - sled_ip String, - address_type Int32, - vsys_id Int32, - t_vsys_id Int32, - flags Int64, - flags_identify_info String, - -- security_rule_list Array(Int64), - -- security_action String, - -- monitor_rule_list Array(Int64), - shaping_rule_list Array(Int64), - -- proxy_rule_list Array(Int64), - -- statistics_rule_list Array(Int64), - -- sc_rule_list Array(Int64), - -- sc_rsp_raw Array(Int64), - -- sc_rsp_decrypted Array(Int64), - -- proxy_action String, - -- proxy_pinning_status Nullable(Int32), - -- proxy_intercept_status Nullable(Int32), - -- proxy_passthrough_reason String, - -- proxy_client_side_latency_ms Nullable(Int32), - -- proxy_server_side_latency_ms Nullable(Int32), - -- proxy_client_side_version String, - -- proxy_server_side_version String, - -- proxy_cert_verify Nullable(Int32), - -- proxy_intercept_error String, - monitor_mirrored_pkts Nullable(Int32), - monitor_mirrored_bytes Nullable(Int32), - client_ip String, - client_port Int32, - -- client_os_desc String, - client_geolocation LowCardinality(String), - client_asn Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - -- apn String, - server_ip String, - server_port Int32, - -- server_os_desc String, - server_geolocation LowCardinality(String), - server_asn Nullable(Int64), - server_fqdn String, - server_domain String, - app_transition String,  - app LowCardinality(String), - -- app_debug_info String, - -- app_content String, - fqdn_category_list Array(Int64), - -- ip_protocol LowCardinality(String), - decoded_path LowCardinality(String), - sip_call_id String, - sip_originator_description String, - sip_responder_description String, - sip_user_agent String, - sip_server String, - sip_originator_sdp_connect_ip String, - sip_originator_sdp_media_port Nullable(Int32), - sip_originator_sdp_media_type String, - sip_originator_sdp_content String, - sip_responder_sdp_connect_ip String, - sip_responder_sdp_media_port Nullable(Int32), - sip_responder_sdp_media_type String, - sip_responder_sdp_content String, - sip_duration_s Nullable(Int32), - sip_bye String, - rtp_payload_type_c2s Nullable(Int32), - rtp_payload_type_s2c Nullable(Int32), - rtp_pcap_path String, - rtp_originator_dir Nullable(Int32), - sent_pkts Int64, - received_pkts Int64, - sent_bytes Int64, - received_bytes Int64, - tcp_c2s_ip_fragments Nullable(Int64), - tcp_s2c_ip_fragments Nullable(Int64), - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_rtt_ms Nullable(Int32), - tcp_client_isn Nullable(Int64), - tcp_server_isn Nullable(Int64), - packet_capture_file String, - in_src_mac String, - out_src_mac String, - in_dest_mac String, - out_dest_mac String, - encapsulation String, - dup_traffic_flag Nullable(Int32), - tunnel_endpoint_a_desc String, - tunnel_endpoint_b_desc String -) -AS -SELECT - common_recv_time as recv_time, - common_log_id as log_id, - common_schema_type as decoded_as, - common_stream_trace_id as session_id, - common_start_timestamp_ms as start_timestamp_ms, - common_end_timestamp_ms as end_timestamp_ms, - common_con_duration_ms as duration_ms, - common_establish_latency_ms as tcp_handshake_latency_ms, - common_ingestion_time as ingestion_time, - common_processing_time as processing_time, - -- common_insert_time as insert_time, - common_device_id as device_id, - common_egress_link_id as out_link_id, - common_ingress_link_id as in_link_id, - common_device_tag as device_tag, - common_data_center as data_center, - common_device_group as device_group, - common_sled_ip as sled_ip, - common_address_type as address_type, - common_vsys_id as vsys_id, - common_t_vsys_id as t_vsys_id, - common_flags as flags, - common_flags_identify_info as flags_identify_info, - -- as security_rule_list, - -- as security_action, - -- as monitor_rule_list, - common_shaping_rule_ids as shaping_rule_list, - -- as proxy_rule_list, - -- as statistics_rule_list, - -- as sc_rule_list, - -- as sc_rsp_raw, - -- as sc_rsp_decrypted, - -- as proxy_action, - -- as proxy_pinning_status, - -- as proxy_intercept_status, - -- as proxy_passthrough_reason, - -- as proxy_client_side_latency_ms, - -- as proxy_server_side_latency_ms, - -- as proxy_client_side_version, - -- as proxy_server_side_version, - -- as proxy_cert_verify, - -- as proxy_intercept_error, - common_mirrored_pkts as monitor_mirrored_pkts, - common_mirrored_bytes as monitor_mirrored_bytes, - common_client_ip as client_ip, - common_client_port as client_port, - -- common_client_os_name as client_os_desc, - common_client_location as client_geolocation, - common_client_asn as client_asn, - common_subscriber_id as subscriber_id, - common_imei as imei, - common_imsi as imsi, - common_phone_number as phone_number, - -- as apn, - common_server_ip as server_ip, - common_server_port as server_port, - -- common_server_os_name as server_os_desc, - common_server_location as server_geolocation, - common_server_asn as server_asn, - common_server_fqdn as server_fqdn, - common_server_domain as server_domain, - common_app_full_path as app_transition, - common_app_label as app, - -- app_debug_info, - -- common_app_behavior as app_content, - common_service_category as fqdn_category_list, - -- ip_protocol, - common_protocol_label as decoded_path, - sip_call_id as sip_call_id, - sip_originator_description as sip_originator_description, - sip_responder_description as sip_responder_description, - sip_user_agent as sip_user_agent, - sip_server as sip_server, - sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, - sip_originator_sdp_media_port as sip_originator_sdp_media_port, - sip_originator_sdp_media_type as sip_originator_sdp_media_type, - sip_originator_sdp_content as sip_originator_sdp_content, - sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, - sip_responder_sdp_media_port as sip_responder_sdp_media_port, - sip_responder_sdp_media_type as sip_responder_sdp_media_type, - sip_responder_sdp_content as sip_responder_sdp_content, - sip_duration_s as sip_duration_s, - sip_bye as sip_bye, - rtp_payload_type_c2s as rtp_payload_type_c2s, - rtp_payload_type_s2c as rtp_payload_type_s2c, - rtp_pcap_path as rtp_pcap_path, - rtp_originator_dir as rtp_originator_dir, - common_c2s_pkt_num as sent_pkts, - common_s2c_pkt_num as received_pkts, - common_c2s_byte_num as sent_bytes, - common_s2c_byte_num as received_bytes, - common_c2s_ipfrag_num as tcp_c2s_ip_fragments, - common_s2c_ipfrag_num as tcp_s2c_ip_fragments, - common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, - common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, - common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, - common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, - common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, - common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, - common_c2s_byte_retrans as tcp_c2s_rtx_bytes, - common_s2c_byte_retrans as tcp_s2c_rtx_bytes, - common_first_ttl as tcp_rtt_ms, - common_tcp_client_isn as tcp_client_isn, - common_tcp_server_isn as tcp_server_isn, - common_packet_capture_file as packet_capture_file, - common_in_src_mac as in_src_mac, - common_out_src_mac as out_src_mac, - common_in_dest_mac as in_dest_mac, - common_out_dest_mac as out_dest_mac, - common_tunnels as encapsulation, - common_has_dup_traffic as dup_traffic_flag, - common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, - common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc -FROM tsg_galaxy_v3.voip_record_local_old -; - --- tsg_galaxy_v3.proxy_event_local -CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.proxy_event_local_2307_to_2402_view on cluster ck_cluster -TO tsg_galaxy_v3.proxy_event_local -( - recv_time Int64, - log_id UInt64, - decoded_as String, - session_id UInt64, - start_timestamp_ms DateTime64(3), - end_timestamp_ms DateTime64(3), - duration_ms Int32, - tcp_handshake_latency_ms Nullable(Int32), - ingestion_time Int64, - processing_time Int64, - -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), - device_id String, - out_link_id Nullable(Int32), - in_link_id Nullable(Int32), - device_tag String, - data_center String, - device_group String, - sled_ip String, - address_type Int32, - vsys_id Int32, - t_vsys_id Int32, - flags Int64, - flags_identify_info String, - -- security_rule_list Array(Int64), - -- security_action String, - -- monitor_rule_list Array(Int64), - shaping_rule_list Array(Int64), - -- proxy_rule_list Array(Int64), - -- statistics_rule_list Array(Int64), - -- sc_rule_list Array(Int64), - -- sc_rsp_raw Array(Int64), - -- sc_rsp_decrypted Array(Int64), - -- proxy_action String, - -- proxy_pinning_status Nullable(Int32), - -- proxy_intercept_status Nullable(Int32), - -- proxy_passthrough_reason String, - -- proxy_client_side_latency_ms Nullable(Int32), - -- proxy_server_side_latency_ms Nullable(Int32), - -- proxy_client_side_version String, - -- proxy_server_side_version String, - -- proxy_cert_verify Nullable(Int32), - -- proxy_intercept_error String, - monitor_mirrored_pkts Nullable(Int32), - monitor_mirrored_bytes Nullable(Int32), - client_ip String, - client_port Int32, - -- client_os_desc String, - client_geolocation LowCardinality(String), - client_asn Nullable(Int64), - subscriber_id String, - imei String, - imsi String, - phone_number String, - -- apn String, - server_ip String, - server_port Int32, - -- server_os_desc String, - server_geolocation LowCardinality(String), - server_asn Nullable(Int64), - server_fqdn String, - server_domain String, - app_transition String,  - app LowCardinality(String), - -- app_debug_info String, - -- app_content String, - fqdn_category_list Array(Int64), - -- ip_protocol LowCardinality(String), - decoded_path LowCardinality(String), - http_url String, - http_host String, - http_request_line String, - http_response_line String, - http_request_body String, - http_response_body String, - http_proxy_flag Nullable(Int32), - http_sequence Nullable(Int32), - http_cookie String, - http_referer String, - http_user_agent String, - http_request_content_length Nullable(Int64), - http_request_content_type String, - http_response_content_length Nullable(Int64), - http_response_content_type String, - http_set_cookie String, - http_version String, - -- http_status_code Nullable(Int32), - http_response_latency_ms Nullable(Int32), - http_session_duration_ms Nullable(Int32), - http_action_file_size Nullable(Int64), - doh_url String, - doh_host String, - doh_request_line String, - doh_response_line String, - doh_cookie String, - doh_referer String, - doh_user_agent String, - doh_content_length String, - doh_content_type String, - doh_set_cookie String, - doh_version String, - doh_message_id Int64, - doh_qr Nullable(Int64), - doh_opcode Nullable(Int64), - doh_aa Nullable(Int64), - doh_tc Nullable(Int64), - doh_rd Nullable(Int64), - doh_ra Nullable(Int64), - doh_rcode Nullable(Int64), - doh_qdcount Nullable(Int64), - doh_ancount Nullable(Int64), - doh_nscount Nullable(Int64), - doh_arcount Nullable(Int64), - doh_qname String, - doh_qtype Nullable(Int64), - doh_qclass Nullable(Int64), - doh_cname String, - doh_sub Nullable(Int64), - doh_rr String, - sent_pkts Int64, - received_pkts Int64, - sent_bytes Int64, - received_bytes Int64, - tcp_c2s_ip_fragments Nullable(Int64), - tcp_s2c_ip_fragments Nullable(Int64), - tcp_c2s_lost_bytes Nullable(Int64), - tcp_s2c_lost_bytes Nullable(Int64), - tcp_c2s_o3_pkts Nullable(Int64), - tcp_s2c_o3_pkts Nullable(Int64), - tcp_c2s_rtx_pkts Nullable(Int64), - tcp_s2c_rtx_pkts Nullable(Int64), - tcp_c2s_rtx_bytes Nullable(Int64), - tcp_s2c_rtx_bytes Nullable(Int64), - tcp_rtt_ms Nullable(Int32), - tcp_client_isn Nullable(Int64), - tcp_server_isn Nullable(Int64), - packet_capture_file String, - in_src_mac String, - out_src_mac String, - in_dest_mac String, - out_dest_mac String, - encapsulation String, - dup_traffic_flag Nullable(Int32), - tunnel_endpoint_a_desc String, - tunnel_endpoint_b_desc String -) -AS -SELECT - common_recv_time as recv_time, - common_log_id as log_id, - common_schema_type as decoded_as, - common_stream_trace_id as session_id, - common_start_timestamp_ms as start_timestamp_ms, - common_end_timestamp_ms as end_timestamp_ms, - common_con_duration_ms as duration_ms, - common_establish_latency_ms as tcp_handshake_latency_ms, - common_ingestion_time as ingestion_time, - common_processing_time as processing_time, - -- common_insert_time as insert_time, - common_device_id as device_id, - common_egress_link_id as out_link_id, - common_ingress_link_id as in_link_id, - common_device_tag as device_tag, - common_data_center as data_center, - common_device_group as device_group, - common_sled_ip as sled_ip, - common_address_type as address_type, - common_vsys_id as vsys_id, - common_t_vsys_id as t_vsys_id, - common_flags as flags, - common_flags_identify_info as flags_identify_info, - -- as security_rule_list, - -- as security_action, - -- as monitor_rule_list, - common_shaping_rule_ids as shaping_rule_list, - -- as proxy_rule_list, - -- as statistics_rule_list, - -- as sc_rule_list, - -- as sc_rsp_raw, - -- as sc_rsp_decrypted, - -- as proxy_action, - -- as proxy_pinning_status, - -- as proxy_intercept_status, - -- as proxy_passthrough_reason, - -- as proxy_client_side_latency_ms, - -- as proxy_server_side_latency_ms, - -- as proxy_client_side_version, - -- as proxy_server_side_version, - -- as proxy_cert_verify, - -- as proxy_intercept_error, - common_mirrored_pkts as monitor_mirrored_pkts, - common_mirrored_bytes as monitor_mirrored_bytes, - common_client_ip as client_ip, - common_client_port as client_port, - -- common_client_os_name as client_os_desc, - common_client_location as client_geolocation, - common_client_asn as client_asn, - common_subscriber_id as subscriber_id, - common_imei as imei, - common_imsi as imsi, - common_phone_number as phone_number, - -- as apn, - common_server_ip as server_ip, - common_server_port as server_port, - -- common_server_os_name as server_os_desc, - common_server_location as server_geolocation, - common_server_asn as server_asn, - common_server_fqdn as server_fqdn, - common_server_domain as server_domain, - common_app_full_path as app_transition, - common_app_label as app, - -- app_debug_info, - -- common_app_behavior as app_content, - common_service_category as fqdn_category_list, - -- ip_protocol, - common_protocol_label as decoded_path, - http_url as http_url, - http_host as http_host, - http_request_line as http_request_line, - http_response_line as http_response_line, - http_request_body as http_request_body, - http_response_body as http_response_body, - http_proxy_flag as http_proxy_flag, - http_sequence as http_sequence, - http_cookie as http_cookie, - http_referer as http_referer, - http_user_agent as http_user_agent, - http_request_content_length as http_request_content_length, - http_request_content_type as http_request_content_type, - http_response_content_length as http_response_content_length, - http_response_content_type as http_response_content_type, - http_set_cookie as http_set_cookie, - http_version as http_version, - -- http_status_code as http_status_code, - http_response_latency_ms as http_response_latency_ms, - http_session_duration_ms as http_session_duration_ms, - http_action_file_size as http_action_file_size, - doh_url as doh_url, - doh_host as doh_host, - doh_request_line as doh_request_line, - doh_response_line as doh_response_line, - doh_cookie as doh_cookie, - doh_referer as doh_referer, - doh_user_agent as doh_user_agent, - doh_content_length as doh_content_length, - doh_content_type as doh_content_type, - doh_set_cookie as doh_set_cookie, - doh_version as doh_version, - doh_message_id as doh_message_id, - doh_qr as doh_qr, - doh_opcode as doh_opcode, - doh_aa as doh_aa, - doh_tc as doh_tc, - doh_rd as doh_rd, - doh_ra as doh_ra, - doh_rcode as doh_rcode, - doh_qdcount as doh_qdcount, - doh_ancount as doh_ancount, - doh_nscount as doh_nscount, - doh_arcount as doh_arcount, - doh_qname as doh_qname, - doh_qtype as doh_qtype, - doh_qclass as doh_qclass, - doh_cname as doh_cname, - doh_sub as doh_sub, - doh_rr as doh_rr, - common_c2s_pkt_num as sent_pkts, - common_s2c_pkt_num as received_pkts, - common_c2s_byte_num as sent_bytes, - common_s2c_byte_num as received_bytes, - common_c2s_ipfrag_num as tcp_c2s_ip_fragments, - common_s2c_ipfrag_num as tcp_s2c_ip_fragments, - common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, - common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, - common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, - common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, - common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, - common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, - common_c2s_byte_retrans as tcp_c2s_rtx_bytes, - common_s2c_byte_retrans as tcp_s2c_rtx_bytes, - common_first_ttl as tcp_rtt_ms, - common_tcp_client_isn as tcp_client_isn, - common_tcp_server_isn as tcp_server_isn, - common_packet_capture_file as packet_capture_file, - common_in_src_mac as in_src_mac, - common_out_src_mac as out_src_mac, - common_in_dest_mac as in_dest_mac, - common_out_dest_mac as out_dest_mac, - common_tunnels as encapsulation, - common_has_dup_traffic as dup_traffic_flag, - common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, - common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc -FROM tsg_galaxy_v3.proxy_event_local_old -; - --- tsg_galaxy_v3.dos_event_local -CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.dos_event_local_2307_to_2402_view on cluster ck_cluster -TO tsg_galaxy_v3.dos_event_local -( - vsys_id Int32, - recv_time Int64, - log_id UInt64, - profile_id Int64, - start_time Int64, - end_time Int64, - attack_type String, - severity String, - conditions String, - destination_ip String, - destination_country String, - source_ip_list String, - source_country_list String, - session_rate Int64, - packet_rate Int64, - bit_rate Int64 -) -AS -SELECT - vsys_id as vsys_id, - start_time as recv_time, - log_id as log_id, - profile_id as profile_id, - start_time as start_time, - end_time as end_time, - attack_type as attack_type, - severity as severity, - conditions as conditions, - destination_ip as destination_ip, - destination_country as destination_country, - source_ip_list as source_ip_list, - source_country_list as source_country_list, - session_rate as session_rate, - packet_rate as packet_rate, - bit_rate as bit_rate -FROM tsg_galaxy_v3.dos_event_local_old +set distributed_ddl_task_timeout = 180; + +-- 创建同步源表同步2402临时表物化视图, 七个表 + +-- tsg_galaxy_v3.session_record_local +CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.session_record_local_2307_to_2402_view on cluster ck_cluster +TO tsg_galaxy_v3.session_record_local +( + recv_time Int64, + log_id UInt64, + decoded_as String, + session_id UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int32, + tcp_handshake_latency_ms Nullable(Int32), + ingestion_time Int64, + processing_time Int64, + -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), + device_id String, + out_link_id Nullable(Int32), + in_link_id Nullable(Int32), + device_tag String, + data_center String, + device_group String, + sled_ip String, + address_type Int32, + vsys_id Int32, + t_vsys_id Int32, + flags Int64, + flags_identify_info String, + -- security_rule_list Array(Int64), + -- security_action String, + -- monitor_rule_list Array(Int64), + shaping_rule_list Array(Int64), + -- proxy_rule_list Array(Int64), + -- statistics_rule_list Array(Int64), + -- sc_rule_list Array(Int64), + -- sc_rsp_raw Array(Int64), + -- sc_rsp_decrypted Array(Int64), + -- proxy_action String, + -- proxy_pinning_status Nullable(Int32), + -- proxy_intercept_status Nullable(Int32), + -- proxy_passthrough_reason String, + -- proxy_client_side_latency_ms Nullable(Int32), + -- proxy_server_side_latency_ms Nullable(Int32), + -- proxy_client_side_version String, + -- proxy_server_side_version String, + -- proxy_cert_verify Nullable(Int32), + -- proxy_intercept_error String, + monitor_mirrored_pkts Nullable(Int32), + monitor_mirrored_bytes Nullable(Int32), + client_ip String, + client_port Int32, + -- client_os_desc String, + client_geolocation LowCardinality(String), + client_asn Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + -- apn String, + server_ip String, + server_port Int32, + -- server_os_desc String, + server_geolocation LowCardinality(String), + server_asn Nullable(Int64), + server_fqdn String, + server_domain String, + app_transition String, + app LowCardinality(String), + -- app_debug_info String, + -- app_content String, + fqdn_category_list Array(Int64), + -- ip_protocol LowCardinality(String), + decoded_path LowCardinality(String), + dns_message_id Nullable(Int32), + dns_qr Nullable(Int32), + dns_opcode Nullable(Int32), + dns_aa Nullable(Int32), + dns_tc Nullable(Int32), + dns_rd Nullable(Int32), + dns_ra Nullable(Int32), + dns_rcode Nullable(Int32), + dns_qdcount Nullable(Int32), + dns_ancount Nullable(Int32), + dns_nscount Nullable(Int32), + dns_arcount Nullable(Int32), + dns_qname String, + dns_qtype Nullable(Int32), + dns_qclass Nullable(Int32), + dns_cname String, + dns_sub Nullable(Int32), + dns_rr String, + dns_response_latency_ms Nullable(Int32), + http_url String, + http_host String, + http_request_line String, + http_response_line String, + http_request_body String, + http_response_body String, + http_proxy_flag Nullable(Int32), + http_sequence Nullable(Int32), + http_cookie String, + http_referer String, + http_user_agent String, + http_request_content_length Nullable(Int64), + http_request_content_type String, + http_response_content_length Nullable(Int64), + http_response_content_type String, + http_set_cookie String, + http_version String, + -- http_status_code Nullable(Int32), + http_response_latency_ms Nullable(Int32), + http_session_duration_ms Nullable(Int32), + http_action_file_size Nullable(Int64), + ssl_version String, + ssl_sni String, + ssl_san String, + ssl_cn String, + ssl_handshake_latency_ms Nullable(Int32), + ssl_ja3_hash String, + ssl_ja3s_hash String, + ssl_cert_issuer String, + ssl_cert_subject String, + -- ssl_esni_flag Nullable(Int32), + -- ssl_ech_flag Nullable(Int32), + dtls_cookie String, + dtls_version String, + dtls_sni String, + dtls_san String, + dtls_cn String, + dtls_handshake_latency_ms Nullable(Int32), + dtls_ja3_fingerprint String, + dtls_ja3_hash String, + dtls_cert_issuer String, + dtls_cert_subject String, + mail_protocol_type String, + mail_account String, + mail_from_cmd String, + mail_to_cmd String, + mail_from String, + -- mail_password String, + mail_to String, + mail_cc String, + mail_bcc String, + mail_subject String, + mail_subject_charset String, + mail_attachment_name String, + mail_attachment_name_charset String, + mail_eml_file String, + ftp_account String, + ftp_url String, + ftp_link_type String, + quic_version String, + quic_sni String, + quic_user_agent String, + rdp_cookie String, + rdp_security_protocol String, + rdp_client_channels String, + rdp_keyboard_layout String, + rdp_client_version String, + rdp_client_name String, + rdp_client_product_id String, + rdp_desktop_width String, + rdp_desktop_height String, + rdp_requested_color_depth String, + rdp_certificate_type String, + rdp_certificate_count Nullable(Int32), + rdp_certificate_permanent Nullable(Int32), + rdp_encryption_level String, + rdp_encryption_method String, + ssh_version String, + ssh_auth_success String, + ssh_client_version String, + ssh_server_version String, + ssh_cipher_alg String, + ssh_mac_alg String, + ssh_compression_alg String, + ssh_kex_alg String, + ssh_host_key_alg String, + ssh_host_key String, + ssh_hassh String, + sip_call_id String, + sip_originator_description String, + sip_responder_description String, + sip_user_agent String, + sip_server String, + sip_originator_sdp_connect_ip String, + sip_originator_sdp_media_port Nullable(Int32), + sip_originator_sdp_media_type String, + sip_originator_sdp_content String, + sip_responder_sdp_connect_ip String, + sip_responder_sdp_media_port Nullable(Int32), + sip_responder_sdp_media_type String, + sip_responder_sdp_content String, + sip_duration_s Nullable(Int32), + sip_bye String, + rtp_payload_type_c2s Nullable(Int32), + rtp_payload_type_s2c Nullable(Int32), + rtp_pcap_path String, + rtp_originator_dir Nullable(Int32), + stratum_cryptocurrency String, + stratum_mining_pools String, + stratum_mining_program String, + -- stratum_mining_subscribe String, + sent_pkts Int64, + received_pkts Int64, + sent_bytes Int64, + received_bytes Int64, + tcp_c2s_ip_fragments Nullable(Int64), + tcp_s2c_ip_fragments Nullable(Int64), + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_rtt_ms Nullable(Int32), + tcp_client_isn Nullable(Int64), + tcp_server_isn Nullable(Int64), + packet_capture_file String, + in_src_mac String, + out_src_mac String, + in_dest_mac String, + out_dest_mac String, + encapsulation String, + dup_traffic_flag Nullable(Int32), + tunnel_endpoint_a_desc String, + tunnel_endpoint_b_desc String +) +AS +SELECT + common_recv_time as recv_time, + common_log_id as log_id, + common_schema_type as decoded_as, + common_stream_trace_id as session_id, + common_start_timestamp_ms as start_timestamp_ms, + common_end_timestamp_ms as end_timestamp_ms, + common_con_duration_ms as duration_ms, + common_establish_latency_ms as tcp_handshake_latency_ms, + common_ingestion_time as ingestion_time, + common_processing_time as processing_time, + -- common_insert_time as insert_time, + common_device_id as device_id, + common_egress_link_id as out_link_id, + common_ingress_link_id as in_link_id, + common_device_tag as device_tag, + common_data_center as data_center, + common_device_group as device_group, + common_sled_ip as sled_ip, + common_address_type as address_type, + common_vsys_id as vsys_id, + common_t_vsys_id as t_vsys_id, + common_flags as flags, + common_flags_identify_info as flags_identify_info, + -- as security_rule_list, + -- as security_action, + -- as monitor_rule_list, + common_shaping_rule_ids as shaping_rule_list, + -- as proxy_rule_list, + -- as statistics_rule_list, + -- as sc_rule_list, + -- as sc_rsp_raw, + -- as sc_rsp_decrypted, + -- as proxy_action, + -- as proxy_pinning_status, + -- as proxy_intercept_status, + -- as proxy_passthrough_reason, + -- as proxy_client_side_latency_ms, + -- as proxy_server_side_latency_ms, + -- as proxy_client_side_version, + -- as proxy_server_side_version, + -- as proxy_cert_verify, + -- as proxy_intercept_error, + common_mirrored_pkts as monitor_mirrored_pkts, + common_mirrored_bytes as monitor_mirrored_bytes, + common_client_ip as client_ip, + common_client_port as client_port, + -- common_client_os_name as client_os_desc, + common_client_location as client_geolocation, + common_client_asn as client_asn, + common_subscriber_id as subscriber_id, + common_imei as imei, + common_imsi as imsi, + common_phone_number as phone_number, + -- as apn, + common_server_ip as server_ip, + common_server_port as server_port, + -- common_server_os_name as server_os_desc, + common_server_location as server_geolocation, + common_server_asn as server_asn, + common_server_fqdn as server_fqdn, + common_server_domain as server_domain, + common_app_full_path as app_transition, + common_app_label as app, + -- app_debug_info, + -- common_app_behavior as app_content, + common_service_category as fqdn_category_list, + -- ip_protocol, + common_protocol_label as decoded_path, + dns_message_id as dns_message_id, + dns_qr as dns_qr, + dns_opcode as dns_opcode, + dns_aa as dns_aa, + dns_tc as dns_tc, + dns_rd as dns_rd, + dns_ra as dns_ra, + dns_rcode as dns_rcode, + dns_qdcount as dns_qdcount, + dns_ancount as dns_ancount, + dns_nscount as dns_nscount, + dns_arcount as dns_arcount, + dns_qname as dns_qname, + dns_qtype as dns_qtype, + dns_qclass as dns_qclass, + dns_cname as dns_cname, + dns_sub as dns_sub, + dns_rr as dns_rr, + dns_response_latency_ms as dns_response_latency_ms, + http_url as http_url, + http_host as http_host, + http_request_line as http_request_line, + http_response_line as http_response_line, + http_request_body as http_request_body, + http_response_body as http_response_body, + http_proxy_flag as http_proxy_flag, + http_sequence as http_sequence, + http_cookie as http_cookie, + http_referer as http_referer, + http_user_agent as http_user_agent, + http_request_content_length as http_request_content_length, + http_request_content_type as http_request_content_type, + http_response_content_length as http_response_content_length, + http_response_content_type as http_response_content_type, + http_set_cookie as http_set_cookie, + http_version as http_version, + -- http_status_code as http_status_code, + http_response_latency_ms as http_response_latency_ms, + http_session_duration_ms as http_session_duration_ms, + http_action_file_size as http_action_file_size, + ssl_version as ssl_version, + ssl_sni as ssl_sni, + ssl_san as ssl_san, + ssl_cn as ssl_cn, + ssl_con_latency_ms as ssl_handshake_latency_ms, + ssl_ja3_hash as ssl_ja3_hash, + ssl_ja3s_hash as ssl_ja3s_hash, + ssl_cert_issuer as ssl_cert_issuer, + ssl_cert_subject as ssl_cert_subject, + -- ssl_esni_flag as ssl_esni_flag, + -- ssl_ech_flag as ssl_ech_flag, + dtls_cookie as dtls_cookie, + dtls_version as dtls_version, + dtls_sni as dtls_sni, + dtls_san as dtls_san, + dtls_cn as dtls_cn, + dtls_con_latency_ms as dtls_handshake_latency_ms, + dtls_ja3_fingerprint as dtls_ja3_fingerprint, + dtls_ja3_hash as dtls_ja3_hash, + dtls_cert_issuer as dtls_cert_issuer, + dtls_cert_subject as dtls_cert_subject, + mail_protocol_type as mail_protocol_type, + mail_account as mail_account, + mail_from_cmd as mail_from_cmd, + mail_to_cmd as mail_to_cmd, + mail_from as mail_from, + -- as mail_password, + mail_to as mail_to, + mail_cc as mail_cc, + mail_bcc as mail_bcc, + mail_subject as mail_subject, + mail_subject_charset as mail_subject_charset, + mail_attachment_name as mail_attachment_name, + mail_attachment_name_charset as mail_attachment_name_charset, + mail_eml_file as mail_eml_file, + ftp_account as ftp_account, + ftp_url as ftp_url, + ftp_link_type as ftp_link_type, + quic_version as quic_version, + quic_sni as quic_sni, + quic_user_agent as quic_user_agent, + rdp_cookie as rdp_cookie, + rdp_security_protocol as rdp_security_protocol, + rdp_client_channels as rdp_client_channels, + rdp_keyboard_layout as rdp_keyboard_layout, + rdp_client_version as rdp_client_version, + rdp_client_name as rdp_client_name, + rdp_client_product_id as rdp_client_product_id, + rdp_desktop_width as rdp_desktop_width, + rdp_desktop_height as rdp_desktop_height, + rdp_requested_color_depth as rdp_requested_color_depth, + rdp_certificate_type as rdp_certificate_type, + rdp_certificate_count as rdp_certificate_count, + rdp_certificate_permanent as rdp_certificate_permanent, + rdp_encryption_level as rdp_encryption_level, + rdp_encryption_method as rdp_encryption_method, + ssh_version as ssh_version, + ssh_auth_success as ssh_auth_success, + ssh_client_version as ssh_client_version, + ssh_server_version as ssh_server_version, + ssh_cipher_alg as ssh_cipher_alg, + ssh_mac_alg as ssh_mac_alg, + ssh_compression_alg as ssh_compression_alg, + ssh_kex_alg as ssh_kex_alg, + ssh_host_key_alg as ssh_host_key_alg, + ssh_host_key as ssh_host_key, + ssh_hassh as ssh_hassh, + sip_call_id as sip_call_id, + sip_originator_description as sip_originator_description, + sip_responder_description as sip_responder_description, + sip_user_agent as sip_user_agent, + sip_server as sip_server, + sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, + sip_originator_sdp_media_port as sip_originator_sdp_media_port, + sip_originator_sdp_media_type as sip_originator_sdp_media_type, + sip_originator_sdp_content as sip_originator_sdp_content, + sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, + sip_responder_sdp_media_port as sip_responder_sdp_media_port, + sip_responder_sdp_media_type as sip_responder_sdp_media_type, + sip_responder_sdp_content as sip_responder_sdp_content, + sip_duration_s as sip_duration_s, + sip_bye as sip_bye, + rtp_payload_type_c2s as rtp_payload_type_c2s, + rtp_payload_type_s2c as rtp_payload_type_s2c, + rtp_pcap_path as rtp_pcap_path, + rtp_originator_dir as rtp_originator_dir, + stratum_cryptocurrency as stratum_cryptocurrency, + stratum_mining_pools as stratum_mining_pools, + stratum_mining_program as stratum_mining_program, + -- as stratum_mining_subscribe, + common_c2s_pkt_num as sent_pkts, + common_s2c_pkt_num as received_pkts, + common_c2s_byte_num as sent_bytes, + common_s2c_byte_num as received_bytes, + common_c2s_ipfrag_num as tcp_c2s_ip_fragments, + common_s2c_ipfrag_num as tcp_s2c_ip_fragments, + common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, + common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, + common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, + common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, + common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, + common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, + common_c2s_byte_retrans as tcp_c2s_rtx_bytes, + common_s2c_byte_retrans as tcp_s2c_rtx_bytes, + common_first_ttl as tcp_rtt_ms, + common_tcp_client_isn as tcp_client_isn, + common_tcp_server_isn as tcp_server_isn, + common_packet_capture_file as packet_capture_file, + common_in_src_mac as in_src_mac, + common_out_src_mac as out_src_mac, + common_in_dest_mac as in_dest_mac, + common_out_dest_mac as out_dest_mac, + common_tunnels as encapsulation, + common_has_dup_traffic as dup_traffic_flag, + common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, + common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc +FROM tsg_galaxy_v3.session_record_local_old +; + +-- tsg_galaxy_v3.security_event_local +CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.security_event_local_2307_to_security_event_local_2402_view on cluster ck_cluster +TO tsg_galaxy_v3.security_event_local +( + recv_time Int64, + log_id UInt64, + decoded_as String, + session_id UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int32, + tcp_handshake_latency_ms Nullable(Int32), + ingestion_time Int64, + processing_time Int64, + -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), + device_id String, + out_link_id Nullable(Int32), + in_link_id Nullable(Int32), + device_tag String, + data_center String, + device_group String, + sled_ip String, + address_type Int32, + vsys_id Int32, + t_vsys_id Int32, + flags Int64, + flags_identify_info String, + security_rule_list Array(Int64), + security_action String, + monitor_rule_list Array(Int64), + shaping_rule_list Array(Int64), + -- proxy_rule_list Array(Int64), + -- statistics_rule_list Array(Int64), + -- sc_rule_list Array(Int64), + -- sc_rsp_raw Array(Int64), + -- sc_rsp_decrypted Array(Int64), + -- proxy_action String, + -- proxy_pinning_status Nullable(Int32), + -- proxy_intercept_status Nullable(Int32), + -- proxy_passthrough_reason String, + -- proxy_client_side_latency_ms Nullable(Int32), + -- proxy_server_side_latency_ms Nullable(Int32), + -- proxy_client_side_version String, + -- proxy_server_side_version String, + -- proxy_cert_verify Nullable(Int32), + -- proxy_intercept_error String, + monitor_mirrored_pkts Nullable(Int32), + monitor_mirrored_bytes Nullable(Int32), + client_ip String, + client_port Int32, + -- client_os_desc String, + client_geolocation LowCardinality(String), + client_asn Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + -- apn String, + server_ip String, + server_port Int32, + -- server_os_desc String, + server_geolocation LowCardinality(String), + server_asn Nullable(Int64), + server_fqdn String, + server_domain String, + app_transition String, + app LowCardinality(String), + -- app_debug_info String, + -- app_content String, + fqdn_category_list Array(Int64), + -- ip_protocol LowCardinality(String), + decoded_path LowCardinality(String), + dns_message_id Nullable(Int32), + dns_qr Nullable(Int32), + dns_opcode Nullable(Int32), + dns_aa Nullable(Int32), + dns_tc Nullable(Int32), + dns_rd Nullable(Int32), + dns_ra Nullable(Int32), + dns_rcode Nullable(Int32), + dns_qdcount Nullable(Int32), + dns_ancount Nullable(Int32), + dns_nscount Nullable(Int32), + dns_arcount Nullable(Int32), + dns_qname String, + dns_qtype Nullable(Int32), + dns_qclass Nullable(Int32), + dns_cname String, + dns_sub Nullable(Int32), + dns_rr String, + dns_response_latency_ms Nullable(Int32), + http_url String, + http_host String, + http_request_line String, + http_response_line String, + http_request_body String, + http_response_body String, + http_proxy_flag Nullable(Int32), + http_sequence Nullable(Int32), + http_cookie String, + http_referer String, + http_user_agent String, + http_request_content_length Nullable(Int64), + http_request_content_type String, + http_response_content_length Nullable(Int64), + http_response_content_type String, + http_set_cookie String, + http_version String, + -- http_status_code Nullable(Int32), + http_response_latency_ms Nullable(Int32), + http_session_duration_ms Nullable(Int32), + http_action_file_size Nullable(Int64), + ssl_version String, + ssl_sni String, + ssl_san String, + ssl_cn String, + ssl_handshake_latency_ms Nullable(Int32), + ssl_ja3_hash String, + ssl_ja3s_hash String, + ssl_cert_issuer String, + ssl_cert_subject String, + -- ssl_esni_flag Nullable(Int32), + -- ssl_ech_flag Nullable(Int32), + dtls_cookie String, + dtls_version String, + dtls_sni String, + dtls_san String, + dtls_cn String, + dtls_handshake_latency_ms Nullable(Int32), + dtls_ja3_fingerprint String, + dtls_ja3_hash String, + dtls_cert_issuer String, + dtls_cert_subject String, + mail_protocol_type String, + mail_account String, + mail_from_cmd String, + mail_to_cmd String, + mail_from String, + -- mail_password String, + mail_to String, + mail_cc String, + mail_bcc String, + mail_subject String, + mail_subject_charset String, + mail_attachment_name String, + mail_attachment_name_charset String, + mail_eml_file String, + ftp_account String, + ftp_url String, + ftp_link_type String, + quic_version String, + quic_sni String, + quic_user_agent String, + rdp_cookie String, + rdp_security_protocol String, + rdp_client_channels String, + rdp_keyboard_layout String, + rdp_client_version String, + rdp_client_name String, + rdp_client_product_id String, + rdp_desktop_width String, + rdp_desktop_height String, + rdp_requested_color_depth String, + rdp_certificate_type String, + rdp_certificate_count Nullable(Int32), + rdp_certificate_permanent Nullable(Int32), + rdp_encryption_level String, + rdp_encryption_method String, + ssh_version String, + ssh_auth_success String, + ssh_client_version String, + ssh_server_version String, + ssh_cipher_alg String, + ssh_mac_alg String, + ssh_compression_alg String, + ssh_kex_alg String, + ssh_host_key_alg String, + ssh_host_key String, + ssh_hassh String, + sip_call_id String, + sip_originator_description String, + sip_responder_description String, + sip_user_agent String, + sip_server String, + sip_originator_sdp_connect_ip String, + sip_originator_sdp_media_port Nullable(Int32), + sip_originator_sdp_media_type String, + sip_originator_sdp_content String, + sip_responder_sdp_connect_ip String, + sip_responder_sdp_media_port Nullable(Int32), + sip_responder_sdp_media_type String, + sip_responder_sdp_content String, + sip_duration_s Nullable(Int32), + sip_bye String, + rtp_payload_type_c2s Nullable(Int32), + rtp_payload_type_s2c Nullable(Int32), + rtp_pcap_path String, + rtp_originator_dir Nullable(Int32), + stratum_cryptocurrency String, + stratum_mining_pools String, + stratum_mining_program String, + -- stratum_mining_subscribe String, + sent_pkts Int64, + received_pkts Int64, + sent_bytes Int64, + received_bytes Int64, + tcp_c2s_ip_fragments Nullable(Int64), + tcp_s2c_ip_fragments Nullable(Int64), + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_rtt_ms Nullable(Int32), + tcp_client_isn Nullable(Int64), + tcp_server_isn Nullable(Int64), + packet_capture_file String, + in_src_mac String, + out_src_mac String, + in_dest_mac String, + out_dest_mac String, + encapsulation String, + dup_traffic_flag Nullable(Int32), + tunnel_endpoint_a_desc String, + tunnel_endpoint_b_desc String +) +AS +SELECT + common_recv_time as recv_time, + common_log_id as log_id, + common_schema_type as decoded_as, + common_stream_trace_id as session_id, + common_start_timestamp_ms as start_timestamp_ms, + common_end_timestamp_ms as end_timestamp_ms, + common_con_duration_ms as duration_ms, + common_establish_latency_ms as tcp_handshake_latency_ms, + common_ingestion_time as ingestion_time, + common_processing_time as processing_time, + -- common_insert_time as insert_time, + common_device_id as device_id, + common_egress_link_id as out_link_id, + common_ingress_link_id as in_link_id, + common_device_tag as device_tag, + common_data_center as data_center, + common_device_group as device_group, + common_sled_ip as sled_ip, + common_address_type as address_type, + common_vsys_id as vsys_id, + common_t_vsys_id as t_vsys_id, + common_flags as flags, + common_flags_identify_info as flags_identify_info, + if(common_action in (16, 96), array(common_policy_id), array()) as security_rule_list, -- in(Deny、Allow) array(common_policy_id) 安全表 + case common_action + when 16 then 'Deny' + when 96 then 'Allow' + else '' + end as security_action, -- Deny16、Allow96 else '' + if(common_action = 1, array(common_policy_id), array()) as monitor_rule_list, -- 是Monitor(1) 放common_policy_id + common_shaping_rule_ids as shaping_rule_list, + -- as proxy_rule_list, + -- as statistics_rule_list, + -- as sc_rule_list, + -- as sc_rsp_raw, + -- as sc_rsp_decrypted, + -- as proxy_action, + -- as proxy_pinning_status, + -- as proxy_intercept_status, + -- as proxy_passthrough_reason, + -- as proxy_client_side_latency_ms, + -- as proxy_server_side_latency_ms, + -- as proxy_client_side_version, + -- as proxy_server_side_version, + -- as proxy_cert_verify, + -- as proxy_intercept_error, + common_mirrored_pkts as monitor_mirrored_pkts, + common_mirrored_bytes as monitor_mirrored_bytes, + common_client_ip as client_ip, + common_client_port as client_port, + -- common_client_os_name as client_os_desc, + common_client_location as client_geolocation, + common_client_asn as client_asn, + common_subscriber_id as subscriber_id, + common_imei as imei, + common_imsi as imsi, + common_phone_number as phone_number, + -- as apn, + common_server_ip as server_ip, + common_server_port as server_port, + -- common_server_os_name as server_os_desc, + common_server_location as server_geolocation, + common_server_asn as server_asn, + common_server_fqdn as server_fqdn, + common_server_domain as server_domain, + common_app_full_path as app_transition, + common_app_label as app, + -- app_debug_info, + -- common_app_behavior as app_content, + common_service_category as fqdn_category_list, + -- ip_protocol, + common_protocol_label as decoded_path, + dns_message_id as dns_message_id, + dns_qr as dns_qr, + dns_opcode as dns_opcode, + dns_aa as dns_aa, + dns_tc as dns_tc, + dns_rd as dns_rd, + dns_ra as dns_ra, + dns_rcode as dns_rcode, + dns_qdcount as dns_qdcount, + dns_ancount as dns_ancount, + dns_nscount as dns_nscount, + dns_arcount as dns_arcount, + dns_qname as dns_qname, + dns_qtype as dns_qtype, + dns_qclass as dns_qclass, + dns_cname as dns_cname, + dns_sub as dns_sub, + dns_rr as dns_rr, + dns_response_latency_ms as dns_response_latency_ms, + http_url as http_url, + http_host as http_host, + http_request_line as http_request_line, + http_response_line as http_response_line, + http_request_body as http_request_body, + http_response_body as http_response_body, + http_proxy_flag as http_proxy_flag, + http_sequence as http_sequence, + http_cookie as http_cookie, + http_referer as http_referer, + http_user_agent as http_user_agent, + http_request_content_length as http_request_content_length, + http_request_content_type as http_request_content_type, + http_response_content_length as http_response_content_length, + http_response_content_type as http_response_content_type, + http_set_cookie as http_set_cookie, + http_version as http_version, + -- http_status_code as http_status_code, + http_response_latency_ms as http_response_latency_ms, + http_session_duration_ms as http_session_duration_ms, + http_action_file_size as http_action_file_size, + ssl_version as ssl_version, + ssl_sni as ssl_sni, + ssl_san as ssl_san, + ssl_cn as ssl_cn, + ssl_con_latency_ms as ssl_handshake_latency_ms, + ssl_ja3_hash as ssl_ja3_hash, + ssl_ja3s_hash as ssl_ja3s_hash, + ssl_cert_issuer as ssl_cert_issuer, + ssl_cert_subject as ssl_cert_subject, + -- ssl_esni_flag as ssl_esni_flag, + -- ssl_ech_flag as ssl_ech_flag, + dtls_cookie as dtls_cookie, + dtls_version as dtls_version, + dtls_sni as dtls_sni, + dtls_san as dtls_san, + dtls_cn as dtls_cn, + dtls_con_latency_ms as dtls_handshake_latency_ms, + dtls_ja3_fingerprint as dtls_ja3_fingerprint, + dtls_ja3_hash as dtls_ja3_hash, + dtls_cert_issuer as dtls_cert_issuer, + dtls_cert_subject as dtls_cert_subject, + mail_protocol_type as mail_protocol_type, + mail_account as mail_account, + mail_from_cmd as mail_from_cmd, + mail_to_cmd as mail_to_cmd, + mail_from as mail_from, + -- as mail_password, + mail_to as mail_to, + mail_cc as mail_cc, + mail_bcc as mail_bcc, + mail_subject as mail_subject, + mail_subject_charset as mail_subject_charset, + mail_attachment_name as mail_attachment_name, + mail_attachment_name_charset as mail_attachment_name_charset, + mail_eml_file as mail_eml_file, + ftp_account as ftp_account, + ftp_url as ftp_url, + ftp_link_type as ftp_link_type, + quic_version as quic_version, + quic_sni as quic_sni, + quic_user_agent as quic_user_agent, + rdp_cookie as rdp_cookie, + rdp_security_protocol as rdp_security_protocol, + rdp_client_channels as rdp_client_channels, + rdp_keyboard_layout as rdp_keyboard_layout, + rdp_client_version as rdp_client_version, + rdp_client_name as rdp_client_name, + rdp_client_product_id as rdp_client_product_id, + rdp_desktop_width as rdp_desktop_width, + rdp_desktop_height as rdp_desktop_height, + rdp_requested_color_depth as rdp_requested_color_depth, + rdp_certificate_type as rdp_certificate_type, + rdp_certificate_count as rdp_certificate_count, + rdp_certificate_permanent as rdp_certificate_permanent, + rdp_encryption_level as rdp_encryption_level, + rdp_encryption_method as rdp_encryption_method, + ssh_version as ssh_version, + ssh_auth_success as ssh_auth_success, + ssh_client_version as ssh_client_version, + ssh_server_version as ssh_server_version, + ssh_cipher_alg as ssh_cipher_alg, + ssh_mac_alg as ssh_mac_alg, + ssh_compression_alg as ssh_compression_alg, + ssh_kex_alg as ssh_kex_alg, + ssh_host_key_alg as ssh_host_key_alg, + ssh_host_key as ssh_host_key, + ssh_hassh as ssh_hassh, + sip_call_id as sip_call_id, + sip_originator_description as sip_originator_description, + sip_responder_description as sip_responder_description, + sip_user_agent as sip_user_agent, + sip_server as sip_server, + sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, + sip_originator_sdp_media_port as sip_originator_sdp_media_port, + sip_originator_sdp_media_type as sip_originator_sdp_media_type, + sip_originator_sdp_content as sip_originator_sdp_content, + sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, + sip_responder_sdp_media_port as sip_responder_sdp_media_port, + sip_responder_sdp_media_type as sip_responder_sdp_media_type, + sip_responder_sdp_content as sip_responder_sdp_content, + sip_duration_s as sip_duration_s, + sip_bye as sip_bye, + rtp_payload_type_c2s as rtp_payload_type_c2s, + rtp_payload_type_s2c as rtp_payload_type_s2c, + rtp_pcap_path as rtp_pcap_path, + rtp_originator_dir as rtp_originator_dir, + stratum_cryptocurrency as stratum_cryptocurrency, + stratum_mining_pools as stratum_mining_pools, + stratum_mining_program as stratum_mining_program, + -- as stratum_mining_subscribe, + common_c2s_pkt_num as sent_pkts, + common_s2c_pkt_num as received_pkts, + common_c2s_byte_num as sent_bytes, + common_s2c_byte_num as received_bytes, + common_c2s_ipfrag_num as tcp_c2s_ip_fragments, + common_s2c_ipfrag_num as tcp_s2c_ip_fragments, + common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, + common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, + common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, + common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, + common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, + common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, + common_c2s_byte_retrans as tcp_c2s_rtx_bytes, + common_s2c_byte_retrans as tcp_s2c_rtx_bytes, + common_first_ttl as tcp_rtt_ms, + common_tcp_client_isn as tcp_client_isn, + common_tcp_server_isn as tcp_server_isn, + common_packet_capture_file as packet_capture_file, + common_in_src_mac as in_src_mac, + common_out_src_mac as out_src_mac, + common_in_dest_mac as in_dest_mac, + common_out_dest_mac as out_dest_mac, + common_tunnels as encapsulation, + common_has_dup_traffic as dup_traffic_flag, + common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, + common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc +FROM tsg_galaxy_v3.security_event_local_old +where common_action in (16, 96) +; + +-- tsg_galaxy_v3.monitor_event_local +CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.security_event_local_2307_to_monitor_event_local_2402_view on cluster ck_cluster +TO tsg_galaxy_v3.monitor_event_local +( + recv_time Int64, + log_id UInt64, + decoded_as String, + session_id UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int32, + tcp_handshake_latency_ms Nullable(Int32), + ingestion_time Int64, + processing_time Int64, + -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), + device_id String, + out_link_id Nullable(Int32), + in_link_id Nullable(Int32), + device_tag String, + data_center String, + device_group String, + sled_ip String, + address_type Int32, + vsys_id Int32, + t_vsys_id Int32, + flags Int64, + flags_identify_info String, + security_rule_list Array(Int64), + security_action String, + monitor_rule_list Array(Int64), + shaping_rule_list Array(Int64), + -- proxy_rule_list Array(Int64), + -- statistics_rule_list Array(Int64), + -- sc_rule_list Array(Int64), + -- sc_rsp_raw Array(Int64), + -- sc_rsp_decrypted Array(Int64), + -- proxy_action String, + -- proxy_pinning_status Nullable(Int32), + -- proxy_intercept_status Nullable(Int32), + -- proxy_passthrough_reason String, + -- proxy_client_side_latency_ms Nullable(Int32), + -- proxy_server_side_latency_ms Nullable(Int32), + -- proxy_client_side_version String, + -- proxy_server_side_version String, + -- proxy_cert_verify Nullable(Int32), + -- proxy_intercept_error String, + monitor_mirrored_pkts Nullable(Int32), + monitor_mirrored_bytes Nullable(Int32), + client_ip String, + client_port Int32, + -- client_os_desc String, + client_geolocation LowCardinality(String), + client_asn Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + -- apn String, + server_ip String, + server_port Int32, + -- server_os_desc String, + server_geolocation LowCardinality(String), + server_asn Nullable(Int64), + server_fqdn String, + server_domain String, + app_transition String, + app LowCardinality(String), + -- app_debug_info String, + -- app_content String, + fqdn_category_list Array(Int64), + -- ip_protocol LowCardinality(String), + decoded_path LowCardinality(String), + dns_message_id Nullable(Int32), + dns_qr Nullable(Int32), + dns_opcode Nullable(Int32), + dns_aa Nullable(Int32), + dns_tc Nullable(Int32), + dns_rd Nullable(Int32), + dns_ra Nullable(Int32), + dns_rcode Nullable(Int32), + dns_qdcount Nullable(Int32), + dns_ancount Nullable(Int32), + dns_nscount Nullable(Int32), + dns_arcount Nullable(Int32), + dns_qname String, + dns_qtype Nullable(Int32), + dns_qclass Nullable(Int32), + dns_cname String, + dns_sub Nullable(Int32), + dns_rr String, + dns_response_latency_ms Nullable(Int32), + http_url String, + http_host String, + http_request_line String, + http_response_line String, + http_request_body String, + http_response_body String, + http_proxy_flag Nullable(Int32), + http_sequence Nullable(Int32), + http_cookie String, + http_referer String, + http_user_agent String, + http_request_content_length Nullable(Int64), + http_request_content_type String, + http_response_content_length Nullable(Int64), + http_response_content_type String, + http_set_cookie String, + http_version String, + -- http_status_code Nullable(Int32), + http_response_latency_ms Nullable(Int32), + http_session_duration_ms Nullable(Int32), + http_action_file_size Nullable(Int64), + ssl_version String, + ssl_sni String, + ssl_san String, + ssl_cn String, + ssl_handshake_latency_ms Nullable(Int32), + ssl_ja3_hash String, + ssl_ja3s_hash String, + ssl_cert_issuer String, + ssl_cert_subject String, + -- ssl_esni_flag Nullable(Int32), + -- ssl_ech_flag Nullable(Int32), + dtls_cookie String, + dtls_version String, + dtls_sni String, + dtls_san String, + dtls_cn String, + dtls_handshake_latency_ms Nullable(Int32), + dtls_ja3_fingerprint String, + dtls_ja3_hash String, + dtls_cert_issuer String, + dtls_cert_subject String, + mail_protocol_type String, + mail_account String, + mail_from_cmd String, + mail_to_cmd String, + mail_from String, + -- mail_password String, + mail_to String, + mail_cc String, + mail_bcc String, + mail_subject String, + mail_subject_charset String, + mail_attachment_name String, + mail_attachment_name_charset String, + mail_eml_file String, + ftp_account String, + ftp_url String, + ftp_link_type String, + quic_version String, + quic_sni String, + quic_user_agent String, + rdp_cookie String, + rdp_security_protocol String, + rdp_client_channels String, + rdp_keyboard_layout String, + rdp_client_version String, + rdp_client_name String, + rdp_client_product_id String, + rdp_desktop_width String, + rdp_desktop_height String, + rdp_requested_color_depth String, + rdp_certificate_type String, + rdp_certificate_count Nullable(Int32), + rdp_certificate_permanent Nullable(Int32), + rdp_encryption_level String, + rdp_encryption_method String, + ssh_version String, + ssh_auth_success String, + ssh_client_version String, + ssh_server_version String, + ssh_cipher_alg String, + ssh_mac_alg String, + ssh_compression_alg String, + ssh_kex_alg String, + ssh_host_key_alg String, + ssh_host_key String, + ssh_hassh String, + sip_call_id String, + sip_originator_description String, + sip_responder_description String, + sip_user_agent String, + sip_server String, + sip_originator_sdp_connect_ip String, + sip_originator_sdp_media_port Nullable(Int32), + sip_originator_sdp_media_type String, + sip_originator_sdp_content String, + sip_responder_sdp_connect_ip String, + sip_responder_sdp_media_port Nullable(Int32), + sip_responder_sdp_media_type String, + sip_responder_sdp_content String, + sip_duration_s Nullable(Int32), + sip_bye String, + rtp_payload_type_c2s Nullable(Int32), + rtp_payload_type_s2c Nullable(Int32), + rtp_pcap_path String, + rtp_originator_dir Nullable(Int32), + stratum_cryptocurrency String, + stratum_mining_pools String, + stratum_mining_program String, + -- stratum_mining_subscribe String, + sent_pkts Int64, + received_pkts Int64, + sent_bytes Int64, + received_bytes Int64, + tcp_c2s_ip_fragments Nullable(Int64), + tcp_s2c_ip_fragments Nullable(Int64), + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_rtt_ms Nullable(Int32), + tcp_client_isn Nullable(Int64), + tcp_server_isn Nullable(Int64), + packet_capture_file String, + in_src_mac String, + out_src_mac String, + in_dest_mac String, + out_dest_mac String, + encapsulation String, + dup_traffic_flag Nullable(Int32), + tunnel_endpoint_a_desc String, + tunnel_endpoint_b_desc String +) +AS +SELECT + common_recv_time as recv_time, + common_log_id as log_id, + common_schema_type as decoded_as, + common_stream_trace_id as session_id, + common_start_timestamp_ms as start_timestamp_ms, + common_end_timestamp_ms as end_timestamp_ms, + common_con_duration_ms as duration_ms, + common_establish_latency_ms as tcp_handshake_latency_ms, + common_ingestion_time as ingestion_time, + common_processing_time as processing_time, + -- common_insert_time as insert_time, + common_device_id as device_id, + common_egress_link_id as out_link_id, + common_ingress_link_id as in_link_id, + common_device_tag as device_tag, + common_data_center as data_center, + common_device_group as device_group, + common_sled_ip as sled_ip, + common_address_type as address_type, + common_vsys_id as vsys_id, + common_t_vsys_id as t_vsys_id, + common_flags as flags, + common_flags_identify_info as flags_identify_info, + if(common_action in (16, 96), array(common_policy_id), array()) as security_rule_list, -- in(Deny、Allow) array(common_policy_id) 安全表 + case common_action + when 16 then 'Deny' + when 96 then 'Allow' + else '' + end as security_action, -- Deny16、Allow96 else '' + if(common_action = 1, array(common_policy_id), array()) as monitor_rule_list, -- 是Monitor(1) 放common_policy_id + common_shaping_rule_ids as shaping_rule_list, + -- as proxy_rule_list, + -- as statistics_rule_list, + -- as sc_rule_list, + -- as sc_rsp_raw, + -- as sc_rsp_decrypted, + -- as proxy_action, + -- as proxy_pinning_status, + -- as proxy_intercept_status, + -- as proxy_passthrough_reason, + -- as proxy_client_side_latency_ms, + -- as proxy_server_side_latency_ms, + -- as proxy_client_side_version, + -- as proxy_server_side_version, + -- as proxy_cert_verify, + -- as proxy_intercept_error, + common_mirrored_pkts as monitor_mirrored_pkts, + common_mirrored_bytes as monitor_mirrored_bytes, + common_client_ip as client_ip, + common_client_port as client_port, + -- common_client_os_name as client_os_desc, + common_client_location as client_geolocation, + common_client_asn as client_asn, + common_subscriber_id as subscriber_id, + common_imei as imei, + common_imsi as imsi, + common_phone_number as phone_number, + -- as apn, + common_server_ip as server_ip, + common_server_port as server_port, + -- common_server_os_name as server_os_desc, + common_server_location as server_geolocation, + common_server_asn as server_asn, + common_server_fqdn as server_fqdn, + common_server_domain as server_domain, + common_app_full_path as app_transition, + common_app_label as app, + -- app_debug_info, + -- common_app_behavior as app_content, + common_service_category as fqdn_category_list, + -- ip_protocol, + common_protocol_label as decoded_path, + dns_message_id as dns_message_id, + dns_qr as dns_qr, + dns_opcode as dns_opcode, + dns_aa as dns_aa, + dns_tc as dns_tc, + dns_rd as dns_rd, + dns_ra as dns_ra, + dns_rcode as dns_rcode, + dns_qdcount as dns_qdcount, + dns_ancount as dns_ancount, + dns_nscount as dns_nscount, + dns_arcount as dns_arcount, + dns_qname as dns_qname, + dns_qtype as dns_qtype, + dns_qclass as dns_qclass, + dns_cname as dns_cname, + dns_sub as dns_sub, + dns_rr as dns_rr, + dns_response_latency_ms as dns_response_latency_ms, + http_url as http_url, + http_host as http_host, + http_request_line as http_request_line, + http_response_line as http_response_line, + http_request_body as http_request_body, + http_response_body as http_response_body, + http_proxy_flag as http_proxy_flag, + http_sequence as http_sequence, + http_cookie as http_cookie, + http_referer as http_referer, + http_user_agent as http_user_agent, + http_request_content_length as http_request_content_length, + http_request_content_type as http_request_content_type, + http_response_content_length as http_response_content_length, + http_response_content_type as http_response_content_type, + http_set_cookie as http_set_cookie, + http_version as http_version, + -- http_status_code as http_status_code, + http_response_latency_ms as http_response_latency_ms, + http_session_duration_ms as http_session_duration_ms, + http_action_file_size as http_action_file_size, + ssl_version as ssl_version, + ssl_sni as ssl_sni, + ssl_san as ssl_san, + ssl_cn as ssl_cn, + ssl_con_latency_ms as ssl_handshake_latency_ms, + ssl_ja3_hash as ssl_ja3_hash, + ssl_ja3s_hash as ssl_ja3s_hash, + ssl_cert_issuer as ssl_cert_issuer, + ssl_cert_subject as ssl_cert_subject, + -- ssl_esni_flag as ssl_esni_flag, + -- ssl_ech_flag as ssl_ech_flag, + dtls_cookie as dtls_cookie, + dtls_version as dtls_version, + dtls_sni as dtls_sni, + dtls_san as dtls_san, + dtls_cn as dtls_cn, + dtls_con_latency_ms as dtls_handshake_latency_ms, + dtls_ja3_fingerprint as dtls_ja3_fingerprint, + dtls_ja3_hash as dtls_ja3_hash, + dtls_cert_issuer as dtls_cert_issuer, + dtls_cert_subject as dtls_cert_subject, + mail_protocol_type as mail_protocol_type, + mail_account as mail_account, + mail_from_cmd as mail_from_cmd, + mail_to_cmd as mail_to_cmd, + mail_from as mail_from, + -- as mail_password, + mail_to as mail_to, + mail_cc as mail_cc, + mail_bcc as mail_bcc, + mail_subject as mail_subject, + mail_subject_charset as mail_subject_charset, + mail_attachment_name as mail_attachment_name, + mail_attachment_name_charset as mail_attachment_name_charset, + mail_eml_file as mail_eml_file, + ftp_account as ftp_account, + ftp_url as ftp_url, + ftp_link_type as ftp_link_type, + quic_version as quic_version, + quic_sni as quic_sni, + quic_user_agent as quic_user_agent, + rdp_cookie as rdp_cookie, + rdp_security_protocol as rdp_security_protocol, + rdp_client_channels as rdp_client_channels, + rdp_keyboard_layout as rdp_keyboard_layout, + rdp_client_version as rdp_client_version, + rdp_client_name as rdp_client_name, + rdp_client_product_id as rdp_client_product_id, + rdp_desktop_width as rdp_desktop_width, + rdp_desktop_height as rdp_desktop_height, + rdp_requested_color_depth as rdp_requested_color_depth, + rdp_certificate_type as rdp_certificate_type, + rdp_certificate_count as rdp_certificate_count, + rdp_certificate_permanent as rdp_certificate_permanent, + rdp_encryption_level as rdp_encryption_level, + rdp_encryption_method as rdp_encryption_method, + ssh_version as ssh_version, + ssh_auth_success as ssh_auth_success, + ssh_client_version as ssh_client_version, + ssh_server_version as ssh_server_version, + ssh_cipher_alg as ssh_cipher_alg, + ssh_mac_alg as ssh_mac_alg, + ssh_compression_alg as ssh_compression_alg, + ssh_kex_alg as ssh_kex_alg, + ssh_host_key_alg as ssh_host_key_alg, + ssh_host_key as ssh_host_key, + ssh_hassh as ssh_hassh, + sip_call_id as sip_call_id, + sip_originator_description as sip_originator_description, + sip_responder_description as sip_responder_description, + sip_user_agent as sip_user_agent, + sip_server as sip_server, + sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, + sip_originator_sdp_media_port as sip_originator_sdp_media_port, + sip_originator_sdp_media_type as sip_originator_sdp_media_type, + sip_originator_sdp_content as sip_originator_sdp_content, + sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, + sip_responder_sdp_media_port as sip_responder_sdp_media_port, + sip_responder_sdp_media_type as sip_responder_sdp_media_type, + sip_responder_sdp_content as sip_responder_sdp_content, + sip_duration_s as sip_duration_s, + sip_bye as sip_bye, + rtp_payload_type_c2s as rtp_payload_type_c2s, + rtp_payload_type_s2c as rtp_payload_type_s2c, + rtp_pcap_path as rtp_pcap_path, + rtp_originator_dir as rtp_originator_dir, + stratum_cryptocurrency as stratum_cryptocurrency, + stratum_mining_pools as stratum_mining_pools, + stratum_mining_program as stratum_mining_program, + -- as stratum_mining_subscribe, + common_c2s_pkt_num as sent_pkts, + common_s2c_pkt_num as received_pkts, + common_c2s_byte_num as sent_bytes, + common_s2c_byte_num as received_bytes, + common_c2s_ipfrag_num as tcp_c2s_ip_fragments, + common_s2c_ipfrag_num as tcp_s2c_ip_fragments, + common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, + common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, + common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, + common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, + common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, + common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, + common_c2s_byte_retrans as tcp_c2s_rtx_bytes, + common_s2c_byte_retrans as tcp_s2c_rtx_bytes, + common_first_ttl as tcp_rtt_ms, + common_tcp_client_isn as tcp_client_isn, + common_tcp_server_isn as tcp_server_isn, + common_packet_capture_file as packet_capture_file, + common_in_src_mac as in_src_mac, + common_out_src_mac as out_src_mac, + common_in_dest_mac as in_dest_mac, + common_out_dest_mac as out_dest_mac, + common_tunnels as encapsulation, + common_has_dup_traffic as dup_traffic_flag, + common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, + common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc +FROM tsg_galaxy_v3.security_event_local_old +where common_action = 1 +; + +-- tsg_galaxy_v3.transaction_record_local +CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.transaction_record_local_2307_to_2402_view on cluster ck_cluster +TO tsg_galaxy_v3.transaction_record_local +( + recv_time Int64, + log_id UInt64, + decoded_as String, + session_id UInt64, + ingestion_time Int64, + processing_time Int64, + -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), + address_type Int32, + vsys_id Int32, + client_ip String, + client_port Int32, + server_ip String, + server_port Int32, + sent_pkts Int64, + received_pkts Int64, + sent_bytes Int64, + received_bytes Int64, + dns_message_id Nullable(Int32), + dns_qr Nullable(Int32), + dns_opcode Nullable(Int32), + dns_aa Nullable(Int32), + dns_tc Nullable(Int32), + dns_rd Nullable(Int32), + dns_ra Nullable(Int32), + dns_rcode Nullable(Int32), + dns_qdcount Nullable(Int32), + dns_ancount Nullable(Int32), + dns_nscount Nullable(Int32), + dns_arcount Nullable(Int32), + dns_qname String, + dns_qtype Nullable(Int32), + dns_qclass Nullable(Int32), + dns_cname String, + dns_sub Nullable(Int32), + dns_rr String, + dns_response_latency_ms Nullable(Int32), + http_url String, + http_host String, + http_request_line String, + http_response_line String, + http_request_body String, + http_response_body String, + http_proxy_flag Nullable(Int32), + http_sequence Nullable(Int32), + http_cookie String, + http_referer String, + http_user_agent String, + http_request_content_length Nullable(Int64), + http_request_content_type String, + http_response_content_length Nullable(Int64), + http_response_content_type String, + http_set_cookie String, + http_version String, + -- http_status_code Nullable(Int32), + http_response_latency_ms Nullable(Int32), + http_session_duration_ms Nullable(Int32), + http_action_file_size Nullable(Int64), + -- mail_protocol_type String, + -- mail_account String, + -- mail_from_cmd String, + -- mail_to_cmd String, + -- mail_from String, + -- mail_password String, + -- mail_to String, + -- mail_cc String, + -- mail_bcc String, + -- mail_subject String, + -- mail_subject_charset String, + -- mail_attachment_name String, + -- mail_attachment_name_charset String, + -- mail_eml_file String, + sip_call_id String, + sip_originator_description String, + sip_responder_description String, + sip_user_agent String, + sip_server String, + sip_originator_sdp_connect_ip String, + sip_originator_sdp_media_port Nullable(Int32), + sip_originator_sdp_media_type String, + sip_originator_sdp_content String, + sip_responder_sdp_connect_ip String, + sip_responder_sdp_media_port Nullable(Int32), + sip_responder_sdp_media_type String, + sip_responder_sdp_content String, + sip_duration_s Nullable(Int32), + sip_bye String +) +AS +SELECT + common_recv_time as recv_time, + common_log_id as log_id, + common_schema_type as decoded_as, + common_stream_trace_id as session_id, + common_ingestion_time as ingestion_time, + common_processing_time as processing_time, + -- common_insert_time as insert_time, + common_address_type as address_type, + common_vsys_id as vsys_id, + common_client_ip as client_ip, + common_client_port as client_port, + common_server_ip as server_ip, + common_server_port as server_port, + common_c2s_pkt_num as sent_pkts, + common_s2c_pkt_num as received_pkts, + common_c2s_byte_num as sent_bytes, + common_s2c_byte_num as received_bytes, + dns_message_id as dns_message_id, + dns_qr as dns_qr, + dns_opcode as dns_opcode, + dns_aa as dns_aa, + dns_tc as dns_tc, + dns_rd as dns_rd, + dns_ra as dns_ra, + dns_rcode as dns_rcode, + dns_qdcount as dns_qdcount, + dns_ancount as dns_ancount, + dns_nscount as dns_nscount, + dns_arcount as dns_arcount, + dns_qname as dns_qname, + dns_qtype as dns_qtype, + dns_qclass as dns_qclass, + dns_cname as dns_cname, + dns_sub as dns_sub, + dns_rr as dns_rr, + dns_response_latency_ms as dns_response_latency_ms, + http_url as http_url, + http_host as http_host, + http_request_line as http_request_line, + http_response_line as http_response_line, + http_request_body as http_request_body, + http_response_body as http_response_body, + http_proxy_flag as http_proxy_flag, + http_sequence as http_sequence, + http_cookie as http_cookie, + http_referer as http_referer, + http_user_agent as http_user_agent, + http_request_content_length as http_request_content_length, + http_request_content_type as http_request_content_type, + http_response_content_length as http_response_content_length, + http_response_content_type as http_response_content_type, + http_set_cookie as http_set_cookie, + http_version as http_version, + -- http_status_code as http_status_code, + http_response_latency_ms as http_response_latency_ms, + http_session_duration_ms as http_session_duration_ms, + http_action_file_size as http_action_file_size, + -- as mail_protocol_type, + -- as mail_account, + -- as mail_from_cmd, + -- as mail_to_cmd, + -- as mail_from, + -- as mail_password, + -- as mail_to, + -- as mail_cc, + -- as mail_bcc, + -- as mail_subject, + -- as mail_subject_charset, + -- as mail_attachment_name, + -- as mail_attachment_name_charset, + -- as mail_eml_file, + sip_call_id as sip_call_id, + sip_originator_description as sip_originator_description, + sip_responder_description as sip_responder_description, + sip_user_agent as sip_user_agent, + sip_server as sip_server, + sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, + sip_originator_sdp_media_port as sip_originator_sdp_media_port, + sip_originator_sdp_media_type as sip_originator_sdp_media_type, + sip_originator_sdp_content as sip_originator_sdp_content, + sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, + sip_responder_sdp_media_port as sip_responder_sdp_media_port, + sip_responder_sdp_media_type as sip_responder_sdp_media_type, + sip_responder_sdp_content as sip_responder_sdp_content, + sip_duration_s as sip_duration_s, + sip_bye as sip_bye +FROM tsg_galaxy_v3.transaction_record_local_old +; + +-- tsg_galaxy_v3.voip_record_local +CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.voip_record_local_2307_to_2402_view on cluster ck_cluster +TO tsg_galaxy_v3.voip_record_local +( + recv_time Int64, + log_id UInt64, + decoded_as String, + session_id UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int32, + tcp_handshake_latency_ms Nullable(Int32), + ingestion_time Int64, + processing_time Int64, + -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), + device_id String, + out_link_id Nullable(Int32), + in_link_id Nullable(Int32), + device_tag String, + data_center String, + device_group String, + sled_ip String, + address_type Int32, + vsys_id Int32, + t_vsys_id Int32, + flags Int64, + flags_identify_info String, + -- security_rule_list Array(Int64), + -- security_action String, + -- monitor_rule_list Array(Int64), + shaping_rule_list Array(Int64), + -- proxy_rule_list Array(Int64), + -- statistics_rule_list Array(Int64), + -- sc_rule_list Array(Int64), + -- sc_rsp_raw Array(Int64), + -- sc_rsp_decrypted Array(Int64), + -- proxy_action String, + -- proxy_pinning_status Nullable(Int32), + -- proxy_intercept_status Nullable(Int32), + -- proxy_passthrough_reason String, + -- proxy_client_side_latency_ms Nullable(Int32), + -- proxy_server_side_latency_ms Nullable(Int32), + -- proxy_client_side_version String, + -- proxy_server_side_version String, + -- proxy_cert_verify Nullable(Int32), + -- proxy_intercept_error String, + monitor_mirrored_pkts Nullable(Int32), + monitor_mirrored_bytes Nullable(Int32), + client_ip String, + client_port Int32, + -- client_os_desc String, + client_geolocation LowCardinality(String), + client_asn Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + -- apn String, + server_ip String, + server_port Int32, + -- server_os_desc String, + server_geolocation LowCardinality(String), + server_asn Nullable(Int64), + server_fqdn String, + server_domain String, + app_transition String,  + app LowCardinality(String), + -- app_debug_info String, + -- app_content String, + fqdn_category_list Array(Int64), + -- ip_protocol LowCardinality(String), + decoded_path LowCardinality(String), + sip_call_id String, + sip_originator_description String, + sip_responder_description String, + sip_user_agent String, + sip_server String, + sip_originator_sdp_connect_ip String, + sip_originator_sdp_media_port Nullable(Int32), + sip_originator_sdp_media_type String, + sip_originator_sdp_content String, + sip_responder_sdp_connect_ip String, + sip_responder_sdp_media_port Nullable(Int32), + sip_responder_sdp_media_type String, + sip_responder_sdp_content String, + sip_duration_s Nullable(Int32), + sip_bye String, + rtp_payload_type_c2s Nullable(Int32), + rtp_payload_type_s2c Nullable(Int32), + rtp_pcap_path String, + rtp_originator_dir Nullable(Int32), + sent_pkts Int64, + received_pkts Int64, + sent_bytes Int64, + received_bytes Int64, + tcp_c2s_ip_fragments Nullable(Int64), + tcp_s2c_ip_fragments Nullable(Int64), + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_rtt_ms Nullable(Int32), + tcp_client_isn Nullable(Int64), + tcp_server_isn Nullable(Int64), + packet_capture_file String, + in_src_mac String, + out_src_mac String, + in_dest_mac String, + out_dest_mac String, + encapsulation String, + dup_traffic_flag Nullable(Int32), + tunnel_endpoint_a_desc String, + tunnel_endpoint_b_desc String +) +AS +SELECT + common_recv_time as recv_time, + common_log_id as log_id, + common_schema_type as decoded_as, + common_stream_trace_id as session_id, + common_start_timestamp_ms as start_timestamp_ms, + common_end_timestamp_ms as end_timestamp_ms, + common_con_duration_ms as duration_ms, + common_establish_latency_ms as tcp_handshake_latency_ms, + common_ingestion_time as ingestion_time, + common_processing_time as processing_time, + -- common_insert_time as insert_time, + common_device_id as device_id, + common_egress_link_id as out_link_id, + common_ingress_link_id as in_link_id, + common_device_tag as device_tag, + common_data_center as data_center, + common_device_group as device_group, + common_sled_ip as sled_ip, + common_address_type as address_type, + common_vsys_id as vsys_id, + common_t_vsys_id as t_vsys_id, + common_flags as flags, + common_flags_identify_info as flags_identify_info, + -- as security_rule_list, + -- as security_action, + -- as monitor_rule_list, + common_shaping_rule_ids as shaping_rule_list, + -- as proxy_rule_list, + -- as statistics_rule_list, + -- as sc_rule_list, + -- as sc_rsp_raw, + -- as sc_rsp_decrypted, + -- as proxy_action, + -- as proxy_pinning_status, + -- as proxy_intercept_status, + -- as proxy_passthrough_reason, + -- as proxy_client_side_latency_ms, + -- as proxy_server_side_latency_ms, + -- as proxy_client_side_version, + -- as proxy_server_side_version, + -- as proxy_cert_verify, + -- as proxy_intercept_error, + common_mirrored_pkts as monitor_mirrored_pkts, + common_mirrored_bytes as monitor_mirrored_bytes, + common_client_ip as client_ip, + common_client_port as client_port, + -- common_client_os_name as client_os_desc, + common_client_location as client_geolocation, + common_client_asn as client_asn, + common_subscriber_id as subscriber_id, + common_imei as imei, + common_imsi as imsi, + common_phone_number as phone_number, + -- as apn, + common_server_ip as server_ip, + common_server_port as server_port, + -- common_server_os_name as server_os_desc, + common_server_location as server_geolocation, + common_server_asn as server_asn, + common_server_fqdn as server_fqdn, + common_server_domain as server_domain, + common_app_full_path as app_transition, + common_app_label as app, + -- app_debug_info, + -- common_app_behavior as app_content, + common_service_category as fqdn_category_list, + -- ip_protocol, + common_protocol_label as decoded_path, + sip_call_id as sip_call_id, + sip_originator_description as sip_originator_description, + sip_responder_description as sip_responder_description, + sip_user_agent as sip_user_agent, + sip_server as sip_server, + sip_originator_sdp_connect_ip as sip_originator_sdp_connect_ip, + sip_originator_sdp_media_port as sip_originator_sdp_media_port, + sip_originator_sdp_media_type as sip_originator_sdp_media_type, + sip_originator_sdp_content as sip_originator_sdp_content, + sip_responder_sdp_connect_ip as sip_responder_sdp_connect_ip, + sip_responder_sdp_media_port as sip_responder_sdp_media_port, + sip_responder_sdp_media_type as sip_responder_sdp_media_type, + sip_responder_sdp_content as sip_responder_sdp_content, + sip_duration_s as sip_duration_s, + sip_bye as sip_bye, + rtp_payload_type_c2s as rtp_payload_type_c2s, + rtp_payload_type_s2c as rtp_payload_type_s2c, + rtp_pcap_path as rtp_pcap_path, + rtp_originator_dir as rtp_originator_dir, + common_c2s_pkt_num as sent_pkts, + common_s2c_pkt_num as received_pkts, + common_c2s_byte_num as sent_bytes, + common_s2c_byte_num as received_bytes, + common_c2s_ipfrag_num as tcp_c2s_ip_fragments, + common_s2c_ipfrag_num as tcp_s2c_ip_fragments, + common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, + common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, + common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, + common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, + common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, + common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, + common_c2s_byte_retrans as tcp_c2s_rtx_bytes, + common_s2c_byte_retrans as tcp_s2c_rtx_bytes, + common_first_ttl as tcp_rtt_ms, + common_tcp_client_isn as tcp_client_isn, + common_tcp_server_isn as tcp_server_isn, + common_packet_capture_file as packet_capture_file, + common_in_src_mac as in_src_mac, + common_out_src_mac as out_src_mac, + common_in_dest_mac as in_dest_mac, + common_out_dest_mac as out_dest_mac, + common_tunnels as encapsulation, + common_has_dup_traffic as dup_traffic_flag, + common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, + common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc +FROM tsg_galaxy_v3.voip_record_local_old +; + +-- tsg_galaxy_v3.proxy_event_local +CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.proxy_event_local_2307_to_2402_view on cluster ck_cluster +TO tsg_galaxy_v3.proxy_event_local +( + recv_time Int64, + log_id UInt64, + decoded_as String, + session_id UInt64, + start_timestamp_ms DateTime64(3), + end_timestamp_ms DateTime64(3), + duration_ms Int32, + tcp_handshake_latency_ms Nullable(Int32), + ingestion_time Int64, + processing_time Int64, + -- insert_time Int64 MATERIALIZED toUnixTimestamp(now()), + device_id String, + out_link_id Nullable(Int32), + in_link_id Nullable(Int32), + device_tag String, + data_center String, + device_group String, + sled_ip String, + address_type Int32, + vsys_id Int32, + t_vsys_id Int32, + flags Int64, + flags_identify_info String, + -- security_rule_list Array(Int64), + -- security_action String, + -- monitor_rule_list Array(Int64), + shaping_rule_list Array(Int64), + -- proxy_rule_list Array(Int64), + -- statistics_rule_list Array(Int64), + -- sc_rule_list Array(Int64), + -- sc_rsp_raw Array(Int64), + -- sc_rsp_decrypted Array(Int64), + -- proxy_action String, + -- proxy_pinning_status Nullable(Int32), + -- proxy_intercept_status Nullable(Int32), + -- proxy_passthrough_reason String, + -- proxy_client_side_latency_ms Nullable(Int32), + -- proxy_server_side_latency_ms Nullable(Int32), + -- proxy_client_side_version String, + -- proxy_server_side_version String, + -- proxy_cert_verify Nullable(Int32), + -- proxy_intercept_error String, + monitor_mirrored_pkts Nullable(Int32), + monitor_mirrored_bytes Nullable(Int32), + client_ip String, + client_port Int32, + -- client_os_desc String, + client_geolocation LowCardinality(String), + client_asn Nullable(Int64), + subscriber_id String, + imei String, + imsi String, + phone_number String, + -- apn String, + server_ip String, + server_port Int32, + -- server_os_desc String, + server_geolocation LowCardinality(String), + server_asn Nullable(Int64), + server_fqdn String, + server_domain String, + app_transition String,  + app LowCardinality(String), + -- app_debug_info String, + -- app_content String, + fqdn_category_list Array(Int64), + -- ip_protocol LowCardinality(String), + decoded_path LowCardinality(String), + http_url String, + http_host String, + http_request_line String, + http_response_line String, + http_request_body String, + http_response_body String, + http_proxy_flag Nullable(Int32), + http_sequence Nullable(Int32), + http_cookie String, + http_referer String, + http_user_agent String, + http_request_content_length Nullable(Int64), + http_request_content_type String, + http_response_content_length Nullable(Int64), + http_response_content_type String, + http_set_cookie String, + http_version String, + -- http_status_code Nullable(Int32), + http_response_latency_ms Nullable(Int32), + http_session_duration_ms Nullable(Int32), + http_action_file_size Nullable(Int64), + doh_url String, + doh_host String, + doh_request_line String, + doh_response_line String, + doh_cookie String, + doh_referer String, + doh_user_agent String, + doh_content_length String, + doh_content_type String, + doh_set_cookie String, + doh_version String, + doh_message_id Int64, + doh_qr Nullable(Int64), + doh_opcode Nullable(Int64), + doh_aa Nullable(Int64), + doh_tc Nullable(Int64), + doh_rd Nullable(Int64), + doh_ra Nullable(Int64), + doh_rcode Nullable(Int64), + doh_qdcount Nullable(Int64), + doh_ancount Nullable(Int64), + doh_nscount Nullable(Int64), + doh_arcount Nullable(Int64), + doh_qname String, + doh_qtype Nullable(Int64), + doh_qclass Nullable(Int64), + doh_cname String, + doh_sub Nullable(Int64), + doh_rr String, + sent_pkts Int64, + received_pkts Int64, + sent_bytes Int64, + received_bytes Int64, + tcp_c2s_ip_fragments Nullable(Int64), + tcp_s2c_ip_fragments Nullable(Int64), + tcp_c2s_lost_bytes Nullable(Int64), + tcp_s2c_lost_bytes Nullable(Int64), + tcp_c2s_o3_pkts Nullable(Int64), + tcp_s2c_o3_pkts Nullable(Int64), + tcp_c2s_rtx_pkts Nullable(Int64), + tcp_s2c_rtx_pkts Nullable(Int64), + tcp_c2s_rtx_bytes Nullable(Int64), + tcp_s2c_rtx_bytes Nullable(Int64), + tcp_rtt_ms Nullable(Int32), + tcp_client_isn Nullable(Int64), + tcp_server_isn Nullable(Int64), + packet_capture_file String, + in_src_mac String, + out_src_mac String, + in_dest_mac String, + out_dest_mac String, + encapsulation String, + dup_traffic_flag Nullable(Int32), + tunnel_endpoint_a_desc String, + tunnel_endpoint_b_desc String +) +AS +SELECT + common_recv_time as recv_time, + common_log_id as log_id, + common_schema_type as decoded_as, + common_stream_trace_id as session_id, + common_start_timestamp_ms as start_timestamp_ms, + common_end_timestamp_ms as end_timestamp_ms, + common_con_duration_ms as duration_ms, + common_establish_latency_ms as tcp_handshake_latency_ms, + common_ingestion_time as ingestion_time, + common_processing_time as processing_time, + -- common_insert_time as insert_time, + common_device_id as device_id, + common_egress_link_id as out_link_id, + common_ingress_link_id as in_link_id, + common_device_tag as device_tag, + common_data_center as data_center, + common_device_group as device_group, + common_sled_ip as sled_ip, + common_address_type as address_type, + common_vsys_id as vsys_id, + common_t_vsys_id as t_vsys_id, + common_flags as flags, + common_flags_identify_info as flags_identify_info, + -- as security_rule_list, + -- as security_action, + -- as monitor_rule_list, + common_shaping_rule_ids as shaping_rule_list, + -- as proxy_rule_list, + -- as statistics_rule_list, + -- as sc_rule_list, + -- as sc_rsp_raw, + -- as sc_rsp_decrypted, + -- as proxy_action, + -- as proxy_pinning_status, + -- as proxy_intercept_status, + -- as proxy_passthrough_reason, + -- as proxy_client_side_latency_ms, + -- as proxy_server_side_latency_ms, + -- as proxy_client_side_version, + -- as proxy_server_side_version, + -- as proxy_cert_verify, + -- as proxy_intercept_error, + common_mirrored_pkts as monitor_mirrored_pkts, + common_mirrored_bytes as monitor_mirrored_bytes, + common_client_ip as client_ip, + common_client_port as client_port, + -- common_client_os_name as client_os_desc, + common_client_location as client_geolocation, + common_client_asn as client_asn, + common_subscriber_id as subscriber_id, + common_imei as imei, + common_imsi as imsi, + common_phone_number as phone_number, + -- as apn, + common_server_ip as server_ip, + common_server_port as server_port, + -- common_server_os_name as server_os_desc, + common_server_location as server_geolocation, + common_server_asn as server_asn, + common_server_fqdn as server_fqdn, + common_server_domain as server_domain, + common_app_full_path as app_transition, + common_app_label as app, + -- app_debug_info, + -- common_app_behavior as app_content, + common_service_category as fqdn_category_list, + -- ip_protocol, + common_protocol_label as decoded_path, + http_url as http_url, + http_host as http_host, + http_request_line as http_request_line, + http_response_line as http_response_line, + http_request_body as http_request_body, + http_response_body as http_response_body, + http_proxy_flag as http_proxy_flag, + http_sequence as http_sequence, + http_cookie as http_cookie, + http_referer as http_referer, + http_user_agent as http_user_agent, + http_request_content_length as http_request_content_length, + http_request_content_type as http_request_content_type, + http_response_content_length as http_response_content_length, + http_response_content_type as http_response_content_type, + http_set_cookie as http_set_cookie, + http_version as http_version, + -- http_status_code as http_status_code, + http_response_latency_ms as http_response_latency_ms, + http_session_duration_ms as http_session_duration_ms, + http_action_file_size as http_action_file_size, + doh_url as doh_url, + doh_host as doh_host, + doh_request_line as doh_request_line, + doh_response_line as doh_response_line, + doh_cookie as doh_cookie, + doh_referer as doh_referer, + doh_user_agent as doh_user_agent, + doh_content_length as doh_content_length, + doh_content_type as doh_content_type, + doh_set_cookie as doh_set_cookie, + doh_version as doh_version, + doh_message_id as doh_message_id, + doh_qr as doh_qr, + doh_opcode as doh_opcode, + doh_aa as doh_aa, + doh_tc as doh_tc, + doh_rd as doh_rd, + doh_ra as doh_ra, + doh_rcode as doh_rcode, + doh_qdcount as doh_qdcount, + doh_ancount as doh_ancount, + doh_nscount as doh_nscount, + doh_arcount as doh_arcount, + doh_qname as doh_qname, + doh_qtype as doh_qtype, + doh_qclass as doh_qclass, + doh_cname as doh_cname, + doh_sub as doh_sub, + doh_rr as doh_rr, + common_c2s_pkt_num as sent_pkts, + common_s2c_pkt_num as received_pkts, + common_c2s_byte_num as sent_bytes, + common_s2c_byte_num as received_bytes, + common_c2s_ipfrag_num as tcp_c2s_ip_fragments, + common_s2c_ipfrag_num as tcp_s2c_ip_fragments, + common_c2s_tcp_lostlen as tcp_c2s_lost_bytes, + common_s2c_tcp_lostlen as tcp_s2c_lost_bytes, + common_c2s_tcp_unorder_num as tcp_c2s_o3_pkts, + common_s2c_tcp_unorder_num as tcp_s2c_o3_pkts, + common_c2s_pkt_retrans as tcp_c2s_rtx_pkts, + common_s2c_pkt_retrans as tcp_s2c_rtx_pkts, + common_c2s_byte_retrans as tcp_c2s_rtx_bytes, + common_s2c_byte_retrans as tcp_s2c_rtx_bytes, + common_first_ttl as tcp_rtt_ms, + common_tcp_client_isn as tcp_client_isn, + common_tcp_server_isn as tcp_server_isn, + common_packet_capture_file as packet_capture_file, + common_in_src_mac as in_src_mac, + common_out_src_mac as out_src_mac, + common_in_dest_mac as in_dest_mac, + common_out_dest_mac as out_dest_mac, + common_tunnels as encapsulation, + common_has_dup_traffic as dup_traffic_flag, + common_tunnel_endpoint_a_desc as tunnel_endpoint_a_desc, + common_tunnel_endpoint_b_desc as tunnel_endpoint_b_desc +FROM tsg_galaxy_v3.proxy_event_local_old +; + +-- tsg_galaxy_v3.dos_event_local +CREATE MATERIALIZED VIEW IF NOT EXISTS tsg_galaxy_v3.dos_event_local_2307_to_2402_view on cluster ck_cluster +TO tsg_galaxy_v3.dos_event_local +( + vsys_id Int32, + recv_time Int64, + log_id UInt64, + profile_id Int64, + start_time Int64, + end_time Int64, + attack_type String, + severity String, + conditions String, + destination_ip String, + destination_country String, + source_ip_list String, + source_country_list String, + session_rate Int64, + packet_rate Int64, + bit_rate Int64 +) +AS +SELECT + vsys_id as vsys_id, + start_time as recv_time, + log_id as log_id, + profile_id as profile_id, + start_time as start_time, + end_time as end_time, + attack_type as attack_type, + severity as severity, + conditions as conditions, + destination_ip as destination_ip, + destination_country as destination_country, + source_ip_list as source_ip_list, + source_country_list as source_country_list, + session_rate as session_rate, + packet_rate as packet_rate, + bit_rate as bit_rate +FROM tsg_galaxy_v3.dos_event_local_old ; \ No newline at end of file diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/05_drop_table_2307_to_2402_view.sql b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/05_drop_table_2307_to_2402_view.sql similarity index 98% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/05_drop_table_2307_to_2402_view.sql rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/05_drop_table_2307_to_2402_view.sql index 9afb690..10a1142 100644 --- a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/05_drop_table_2307_to_2402_view.sql +++ b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/05_drop_table_2307_to_2402_view.sql @@ -1,10 +1,10 @@ -set distributed_ddl_task_timeout = 180; - --- 删除旧表同步新表物化视图, 七个表 -drop view if exists tsg_galaxy_v3.session_record_local_2307_to_2402_view on cluster ck_cluster; -drop view if exists tsg_galaxy_v3.security_event_local_2307_to_security_event_local_2402_view on cluster ck_cluster; -drop view if exists tsg_galaxy_v3.security_event_local_2307_to_monitor_event_local_2402_view on cluster ck_cluster; -drop view if exists tsg_galaxy_v3.transaction_record_local_2307_to_2402_view on cluster ck_cluster; -drop view if exists tsg_galaxy_v3.voip_record_local_2307_to_2402_view on cluster ck_cluster; -drop view if exists tsg_galaxy_v3.proxy_event_local_2307_to_2402_view on cluster ck_cluster; -drop view if exists tsg_galaxy_v3.dos_event_local_2307_to_2402_view on cluster ck_cluster; +set distributed_ddl_task_timeout = 180; + +-- 删除旧表同步新表物化视图, 七个表 +drop view if exists tsg_galaxy_v3.session_record_local_2307_to_2402_view on cluster ck_cluster; +drop view if exists tsg_galaxy_v3.security_event_local_2307_to_security_event_local_2402_view on cluster ck_cluster; +drop view if exists tsg_galaxy_v3.security_event_local_2307_to_monitor_event_local_2402_view on cluster ck_cluster; +drop view if exists tsg_galaxy_v3.transaction_record_local_2307_to_2402_view on cluster ck_cluster; +drop view if exists tsg_galaxy_v3.voip_record_local_2307_to_2402_view on cluster ck_cluster; +drop view if exists tsg_galaxy_v3.proxy_event_local_2307_to_2402_view on cluster ck_cluster; +drop view if exists tsg_galaxy_v3.dos_event_local_2307_to_2402_view on cluster ck_cluster; diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/06_drop_old_table.sql b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/06_drop_old_table.sql similarity index 98% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/06_drop_old_table.sql rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/06_drop_old_table.sql index 4a22825..c002b44 100644 --- a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/06_drop_old_table.sql +++ b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/06_drop_old_table.sql @@ -1,17 +1,17 @@ -set distributed_ddl_task_timeout = 180; - --- 删除旧表 -drop table IF EXISTS tsg_galaxy_v3.session_record_local_old on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.security_event_local_old on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.transaction_record_local_old on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.voip_record_local_old on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.proxy_event_local_old on cluster ck_cluster; -drop table IF EXISTS tsg_galaxy_v3.dos_event_local_old on cluster ck_cluster; - --- 删除旧表分布式表 -DROP TABLE IF EXISTS tsg_galaxy_v3.session_record_old ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.security_event_old ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.transaction_record_old ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.voip_record_old ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.proxy_event_old ON CLUSTER ck_query; -DROP TABLE IF EXISTS tsg_galaxy_v3.dos_event_old ON CLUSTER ck_query; +set distributed_ddl_task_timeout = 180; + +-- 删除旧表 +drop table IF EXISTS tsg_galaxy_v3.session_record_local_old on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.security_event_local_old on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.transaction_record_local_old on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.voip_record_local_old on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.proxy_event_local_old on cluster ck_cluster; +drop table IF EXISTS tsg_galaxy_v3.dos_event_local_old on cluster ck_cluster; + +-- 删除旧表分布式表 +DROP TABLE IF EXISTS tsg_galaxy_v3.session_record_old ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.security_event_old ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.transaction_record_old ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.voip_record_old ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.proxy_event_old ON CLUSTER ck_query; +DROP TABLE IF EXISTS tsg_galaxy_v3.dos_event_old ON CLUSTER ck_query; diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/ck表升级步骤.md b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/ck表升级步骤.md similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/ck表升级步骤.md rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/ck表升级步骤.md diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/01_send_migrate_table_scripts.sh b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/01_send_migrate_table_scripts.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/01_send_migrate_table_scripts.sh rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/01_send_migrate_table_scripts.sh diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/02_start_migrate_table.sh b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/02_start_migrate_table.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/02_start_migrate_table.sh rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/02_start_migrate_table.sh diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/03_monitor_migrate_table.sh b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/03_monitor_migrate_table.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/03_monitor_migrate_table.sh rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/03_monitor_migrate_table.sh diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/iplist.txt b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/iplist.txt similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/iplist.txt rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/iplist.txt diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/migrate_local_table_to_2402.sh b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/migrate_local_table_to_2402.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/migrate_local_table_to_2402.sh rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/migrate_local_table_to_2402.sh diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/start_migrate_local_table_to_2402.sh b/tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/start_migrate_local_table_to_2402.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/migrate_table_2402/start_migrate_local_table_to_2402.sh rename to tsg_olap/installation/clickhouse/TSG 2307版本到2402版本升级操作/migrate_table_2402/start_migrate_local_table_to_2402.sh diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/01_create_table_2401.sql b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/01_create_table_2401.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/01_create_table_2401.sql rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/01_create_table_2401.sql diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/02_create_table_2310_to_2401_view.sql b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/02_create_table_2310_to_2401_view.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/02_create_table_2310_to_2401_view.sql rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/02_create_table_2310_to_2401_view.sql diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/03_rename_table.sql b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/03_rename_table.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/03_rename_table.sql rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/03_rename_table.sql diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/04_init_new_table.sql b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/04_init_new_table.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/04_init_new_table.sql rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/04_init_new_table.sql diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/05_check.sql b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/05_check.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/05_check.sql rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/05_check.sql diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/ck表升级步骤.md b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/ck表升级步骤.md similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/ck表升级步骤.md rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/ck表升级步骤.md diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/01_send_migrate_table_scripts.sh b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/01_send_migrate_table_scripts.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/01_send_migrate_table_scripts.sh rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/01_send_migrate_table_scripts.sh diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/02_start_migrate_table.sh b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/02_start_migrate_table.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/02_start_migrate_table.sh rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/02_start_migrate_table.sh diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/03_monitor_migrate_table.sh b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/03_monitor_migrate_table.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/03_monitor_migrate_table.sh rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/03_monitor_migrate_table.sh diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/iplist.txt b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/iplist.txt similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/iplist.txt rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/iplist.txt diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/migrate_local_table_to_2401.sh b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/migrate_local_table_to_2401.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/migrate_local_table_to_2401.sh rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/migrate_local_table_to_2401.sh diff --git a/Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/start_migrate_local_table_to_2401.sh b/tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/start_migrate_local_table_to_2401.sh similarity index 100% rename from Clickhouse最新全量建表语句/TSG 2310版本到2401版本升级操作/migrate_table_2401/start_migrate_local_table_to_2401.sh rename to tsg_olap/installation/clickhouse/TSG 2310版本到2401版本升级操作/migrate_table_2401/start_migrate_local_table_to_2401.sh diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/22.11_LTS_建表语句/.gitkeep b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/22.11_LTS_建表语句/.gitkeep similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/22.11_LTS_建表语句/.gitkeep rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/22.11_LTS_建表语句/.gitkeep diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/22.11_LTS_建表语句/create_ck_table.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/22.11_LTS_建表语句/create_ck_table.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/22.11_LTS_建表语句/create_ck_table.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/22.11_LTS_建表语句/create_ck_table.sql diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/22.11_LTS_建表语句/update.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/22.11_LTS_建表语句/update.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/22.11_LTS_建表语句/update.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/22.11_LTS_建表语句/update.sql diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句.sql diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-07.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-07.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-07.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-07.sql diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-08.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-08.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-08.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_LOG_ID/Clickhouse_TSG_建表语句_2023-08.sql diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句.sql diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-07.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-07.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-07.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-07.sql diff --git a/Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-08.sql b/tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-08.sql similarity index 100% rename from Clickhouse最新全量建表语句/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-08.sql rename to tsg_olap/installation/clickhouse/TSG历史版本建表语句/TSG_OLAP_PRIMARY_KEY_VSYS_ID/Clickhouse_TSG_建表语句_2023-08.sql diff --git a/Clickhouse最新全量建表语句/sql文件同步自动化检测方案/.gitkeep b/tsg_olap/installation/clickhouse/sql文件同步自动化检测方案/.gitkeep similarity index 100% rename from Clickhouse最新全量建表语句/sql文件同步自动化检测方案/.gitkeep rename to tsg_olap/installation/clickhouse/sql文件同步自动化检测方案/.gitkeep diff --git a/Clickhouse最新全量建表语句/sql文件同步自动化检测方案/sqlFilesAutoDetect.py b/tsg_olap/installation/clickhouse/sql文件同步自动化检测方案/sqlFilesAutoDetect.py similarity index 100% rename from Clickhouse最新全量建表语句/sql文件同步自动化检测方案/sqlFilesAutoDetect.py rename to tsg_olap/installation/clickhouse/sql文件同步自动化检测方案/sqlFilesAutoDetect.py diff --git a/Clickhouse最新全量建表语句/sql文件同步自动化检测方案/sql文件同步自动化检测检测原理及执行效果.doc b/tsg_olap/installation/clickhouse/sql文件同步自动化检测方案/sql文件同步自动化检测检测原理及执行效果.doc similarity index 100% rename from Clickhouse最新全量建表语句/sql文件同步自动化检测方案/sql文件同步自动化检测检测原理及执行效果.doc rename to tsg_olap/installation/clickhouse/sql文件同步自动化检测方案/sql文件同步自动化检测检测原理及执行效果.doc diff --git a/Clickhouse最新全量建表语句/system.sql b/tsg_olap/installation/clickhouse/system.sql similarity index 100% rename from Clickhouse最新全量建表语句/system.sql rename to tsg_olap/installation/clickhouse/system.sql diff --git a/Clickhouse最新全量建表语句/Clickhouse_TSG_建表语句.sql b/tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl.sql similarity index 100% rename from Clickhouse最新全量建表语句/Clickhouse_TSG_建表语句.sql rename to tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl.sql diff --git a/Clickhouse最新全量建表语句/Clickhouse_TSG_校验sql.sql b/tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl_check.sql similarity index 100% rename from Clickhouse最新全量建表语句/Clickhouse_TSG_校验sql.sql rename to tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl_check.sql diff --git a/Clickhouse最新全量建表语句/Clickhouse-dll.sql b/tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl_deprecated.sql similarity index 100% rename from Clickhouse最新全量建表语句/Clickhouse-dll.sql rename to tsg_olap/installation/clickhouse/tsg_olap_clickhouse_ddl_deprecated.sql diff --git a/Clickhouse最新全量建表语句/性能测试脚本/ck_query.sh b/tsg_olap/installation/clickhouse/性能测试脚本/ck_query.sh similarity index 100% rename from Clickhouse最新全量建表语句/性能测试脚本/ck_query.sh rename to tsg_olap/installation/clickhouse/性能测试脚本/ck_query.sh diff --git a/Clickhouse最新全量建表语句/性能测试脚本/query-new.sql b/tsg_olap/installation/clickhouse/性能测试脚本/query-new.sql similarity index 100% rename from Clickhouse最新全量建表语句/性能测试脚本/query-new.sql rename to tsg_olap/installation/clickhouse/性能测试脚本/query-new.sql diff --git a/Clickhouse最新全量建表语句/性能测试脚本/query-old.sql b/tsg_olap/installation/clickhouse/性能测试脚本/query-old.sql similarity index 100% rename from Clickhouse最新全量建表语句/性能测试脚本/query-old.sql rename to tsg_olap/installation/clickhouse/性能测试脚本/query-old.sql diff --git a/Clickhouse最新全量建表语句/数据迁移脚本/iplist.txt b/tsg_olap/installation/clickhouse/数据迁移脚本/iplist.txt similarity index 100% rename from Clickhouse最新全量建表语句/数据迁移脚本/iplist.txt rename to tsg_olap/installation/clickhouse/数据迁移脚本/iplist.txt diff --git a/Clickhouse最新全量建表语句/数据迁移脚本/mig.sh b/tsg_olap/installation/clickhouse/数据迁移脚本/mig.sh similarity index 100% rename from Clickhouse最新全量建表语句/数据迁移脚本/mig.sh rename to tsg_olap/installation/clickhouse/数据迁移脚本/mig.sh diff --git a/Clickhouse最新全量建表语句/江苏项目/js-tsg-2402-create-table.sql b/tsg_olap/installation/clickhouse/江苏项目/js-tsg-2402-create-table.sql similarity index 100% rename from Clickhouse最新全量建表语句/江苏项目/js-tsg-2402-create-table.sql rename to tsg_olap/installation/clickhouse/江苏项目/js-tsg-2402-create-table.sql diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/cat_tmp_old_table_row_count.sql b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/cat_tmp_old_table_row_count.sql similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/cat_tmp_old_table_row_count.sql rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/cat_tmp_old_table_row_count.sql diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/cat_v3_old_table_row_count.sql b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/cat_v3_old_table_row_count.sql similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/cat_v3_old_table_row_count.sql rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/cat_v3_old_table_row_count.sql diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/check_tsg_galaxy_tmp_24_02_table.sql b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/check_tsg_galaxy_tmp_24_02_table.sql similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/check_tsg_galaxy_tmp_24_02_table.sql rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/check_tsg_galaxy_tmp_24_02_table.sql diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/init_tsg_galaxy_tmp_24_02_table.sql b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/init_tsg_galaxy_tmp_24_02_table.sql similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/init_tsg_galaxy_tmp_24_02_table.sql rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/init_tsg_galaxy_tmp_24_02_table.sql diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/01_send_migrate_table_scripts.sh b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/01_send_migrate_table_scripts.sh similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/01_send_migrate_table_scripts.sh rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/01_send_migrate_table_scripts.sh diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/02_start_migrate_table.sh b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/02_start_migrate_table.sh similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/02_start_migrate_table.sh rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/02_start_migrate_table.sh diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/03_monitor_migrate_table.sh b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/03_monitor_migrate_table.sh similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/03_monitor_migrate_table.sh rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/03_monitor_migrate_table.sh diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/iplist.txt b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/iplist.txt similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/iplist.txt rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/iplist.txt diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/migrate_local_table_to_2402.sh b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/migrate_local_table_to_2402.sh similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/migrate_local_table_to_2402.sh rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/migrate_local_table_to_2402.sh diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/start_migrate_local_table_to_2402.sh b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/start_migrate_local_table_to_2402.sh similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/migrate_table_2402/start_migrate_local_table_to_2402.sh rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/migrate_table_2402/start_migrate_local_table_to_2402.sh diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/move_tmp_2307_to_tmp_2307_old.sql b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/move_tmp_2307_to_tmp_2307_old.sql similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/move_tmp_2307_to_tmp_2307_old.sql rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/move_tmp_2307_to_tmp_2307_old.sql diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/move_v3_to_tmp.sql b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/move_v3_to_tmp.sql similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/move_v3_to_tmp.sql rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/move_v3_to_tmp.sql diff --git a/Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/通用跨版本迁移数据步骤.md b/tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/通用跨版本迁移数据步骤.md similarity index 100% rename from Clickhouse最新全量建表语句/通用跨版本迁移数据步骤/通用跨版本迁移数据步骤.md rename to tsg_olap/installation/clickhouse/通用跨版本迁移数据步骤/通用跨版本迁移数据步骤.md diff --git a/Groot-Stream 最新全量配置模版/TSG/README.md b/tsg_olap/installation/groot_stream/README.md similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/README.md rename to tsg_olap/installation/groot_stream/README.md diff --git a/Groot-Stream 最新全量配置模版/TSG/etl_session_record_kafka_to_kafka b/tsg_olap/installation/groot_stream/etl_session_record_kafka_to_kafka similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/etl_session_record_kafka_to_kafka rename to tsg_olap/installation/groot_stream/etl_session_record_kafka_to_kafka diff --git a/Groot-Stream 最新全量配置模版/TSG/grootstream.yaml b/tsg_olap/installation/groot_stream/grootstream.yaml similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/grootstream.yaml rename to tsg_olap/installation/groot_stream/grootstream.yaml diff --git a/Groot-Stream 最新全量配置模版/TSG/session_record_processed_kafka_to_clickhouse b/tsg_olap/installation/groot_stream/session_record_processed_kafka_to_clickhouse similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/session_record_processed_kafka_to_clickhouse rename to tsg_olap/installation/groot_stream/session_record_processed_kafka_to_clickhouse diff --git a/Groot-Stream 最新全量配置模版/TSG/udf.plugins b/tsg_olap/installation/groot_stream/udf.plugins similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/udf.plugins rename to tsg_olap/installation/groot_stream/udf.plugins diff --git a/Groot-Stream 最新全量配置模版/TSG/集中式/dos_event_kafka_to_clickhouse b/tsg_olap/installation/groot_stream/集中式/dos_event_kafka_to_clickhouse similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/集中式/dos_event_kafka_to_clickhouse rename to tsg_olap/installation/groot_stream/集中式/dos_event_kafka_to_clickhouse diff --git a/Groot-Stream 最新全量配置模版/TSG/集中式/etl_datapath_telemetry_record_kafka_to_clickhouse b/tsg_olap/installation/groot_stream/集中式/etl_datapath_telemetry_record_kafka_to_clickhouse similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/集中式/etl_datapath_telemetry_record_kafka_to_clickhouse rename to tsg_olap/installation/groot_stream/集中式/etl_datapath_telemetry_record_kafka_to_clickhouse diff --git a/Groot-Stream 最新全量配置模版/TSG/集中式/etl_proxy_event_kafka_to_clickhouse b/tsg_olap/installation/groot_stream/集中式/etl_proxy_event_kafka_to_clickhouse similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/集中式/etl_proxy_event_kafka_to_clickhouse rename to tsg_olap/installation/groot_stream/集中式/etl_proxy_event_kafka_to_clickhouse diff --git a/Groot-Stream 最新全量配置模版/TSG/集中式/etl_session_record_kafka_to_clickhouse b/tsg_olap/installation/groot_stream/集中式/etl_session_record_kafka_to_clickhouse similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/集中式/etl_session_record_kafka_to_clickhouse rename to tsg_olap/installation/groot_stream/集中式/etl_session_record_kafka_to_clickhouse diff --git a/Groot-Stream 最新全量配置模版/TSG/集中式/etl_transaction_record_kafka_to_clickhouse b/tsg_olap/installation/groot_stream/集中式/etl_transaction_record_kafka_to_clickhouse similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/集中式/etl_transaction_record_kafka_to_clickhouse rename to tsg_olap/installation/groot_stream/集中式/etl_transaction_record_kafka_to_clickhouse diff --git a/Groot-Stream 最新全量配置模版/TSG/集中式/etl_voip_record_kafka_to_clickhouse b/tsg_olap/installation/groot_stream/集中式/etl_voip_record_kafka_to_clickhouse similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/集中式/etl_voip_record_kafka_to_clickhouse rename to tsg_olap/installation/groot_stream/集中式/etl_voip_record_kafka_to_clickhouse diff --git a/HBase最新建表语句/HBase建表语句_TSG b/tsg_olap/installation/hbase/HBase建表语句_TSG similarity index 100% rename from HBase最新建表语句/HBase建表语句_TSG rename to tsg_olap/installation/hbase/HBase建表语句_TSG diff --git a/HBase最新建表语句/Phoenix建表语句_TSG.sql b/tsg_olap/installation/hbase/Phoenix建表语句_TSG.sql similarity index 100% rename from HBase最新建表语句/Phoenix建表语句_TSG.sql rename to tsg_olap/installation/hbase/Phoenix建表语句_TSG.sql diff --git a/Groot-Stream 最新全量配置模版/.gitkeep b/tsg_olap/upgrade/2021/2021-02-01/.gitkeep similarity index 100% rename from Groot-Stream 最新全量配置模版/.gitkeep rename to tsg_olap/upgrade/2021/2021-02-01/.gitkeep diff --git a/TSG发布版本更新记录/2021/2021-02-01/Release.md b/tsg_olap/upgrade/2021/2021-02-01/Release.md similarity index 100% rename from TSG发布版本更新记录/2021/2021-02-01/Release.md rename to tsg_olap/upgrade/2021/2021-02-01/Release.md diff --git a/Groot-Stream 最新全量配置模版/TSG/.gitkeep b/tsg_olap/upgrade/2021/2021-02-01/clickhouse/.gitkeep similarity index 100% rename from Groot-Stream 最新全量配置模版/TSG/.gitkeep rename to tsg_olap/upgrade/2021/2021-02-01/clickhouse/.gitkeep diff --git a/TSG发布版本更新记录/2021/2021-02-01/clickhouse/20210201-5448-upsql.txt b/tsg_olap/upgrade/2021/2021-02-01/clickhouse/20210201-5448-upsql.txt similarity index 100% rename from TSG发布版本更新记录/2021/2021-02-01/clickhouse/20210201-5448-upsql.txt rename to tsg_olap/upgrade/2021/2021-02-01/clickhouse/20210201-5448-upsql.txt diff --git a/TSG发布版本更新记录/2021/2021-02-01/.gitkeep b/tsg_olap/upgrade/2021/2021-02-01/galaxy-qgw-service/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/2021-02-01/.gitkeep rename to tsg_olap/upgrade/2021/2021-02-01/galaxy-qgw-service/.gitkeep diff --git a/TSG发布版本更新记录/2021/2021-02-01/galaxy-qgw-service/210201_新增ISN.zip b/tsg_olap/upgrade/2021/2021-02-01/galaxy-qgw-service/210201_新增ISN.zip similarity index 100% rename from TSG发布版本更新记录/2021/2021-02-01/galaxy-qgw-service/210201_新增ISN.zip rename to tsg_olap/upgrade/2021/2021-02-01/galaxy-qgw-service/210201_新增ISN.zip diff --git a/TSG发布版本更新记录/2021/TSG-21.03/Clickhouse/add_column.sql b/tsg_olap/upgrade/2021/TSG-21.03/Clickhouse/add_column.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.03/Clickhouse/add_column.sql rename to tsg_olap/upgrade/2021/TSG-21.03/Clickhouse/add_column.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.03/README.md b/tsg_olap/upgrade/2021/TSG-21.03/README.md similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.03/README.md rename to tsg_olap/upgrade/2021/TSG-21.03/README.md diff --git a/TSG发布版本更新记录/2021/TSG-21.03/查询引擎/connection_record_log.avsc b/tsg_olap/upgrade/2021/TSG-21.03/查询引擎/connection_record_log.avsc similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.03/查询引擎/connection_record_log.avsc rename to tsg_olap/upgrade/2021/TSG-21.03/查询引擎/connection_record_log.avsc diff --git a/TSG发布版本更新记录/2021/TSG-21.03/查询引擎/proxy_event_log.avsc b/tsg_olap/upgrade/2021/TSG-21.03/查询引擎/proxy_event_log.avsc similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.03/查询引擎/proxy_event_log.avsc rename to tsg_olap/upgrade/2021/TSG-21.03/查询引擎/proxy_event_log.avsc diff --git a/TSG发布版本更新记录/2021/TSG-21.03/查询引擎/radius_record_log.avsc b/tsg_olap/upgrade/2021/TSG-21.03/查询引擎/radius_record_log.avsc similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.03/查询引擎/radius_record_log.avsc rename to tsg_olap/upgrade/2021/TSG-21.03/查询引擎/radius_record_log.avsc diff --git a/TSG发布版本更新记录/2021/TSG-21.03/查询引擎/security_event_log.avsc b/tsg_olap/upgrade/2021/TSG-21.03/查询引擎/security_event_log.avsc similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.03/查询引擎/security_event_log.avsc rename to tsg_olap/upgrade/2021/TSG-21.03/查询引擎/security_event_log.avsc diff --git a/TSG发布版本更新记录/2021/TSG-21.03/查询引擎/version.json b/tsg_olap/upgrade/2021/TSG-21.03/查询引擎/version.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.03/查询引擎/version.json rename to tsg_olap/upgrade/2021/TSG-21.03/查询引擎/version.json diff --git a/TSG发布版本更新记录/2021/2021-02-01/clickhouse/.gitkeep b/tsg_olap/upgrade/2021/TSG-21.04/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/2021-02-01/clickhouse/.gitkeep rename to tsg_olap/upgrade/2021/TSG-21.04/.gitkeep diff --git a/TSG发布版本更新记录/2021/TSG-21.04/clickhouse/.gitkeep b/tsg_olap/upgrade/2021/TSG-21.04/clickhouse/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.04/clickhouse/.gitkeep rename to tsg_olap/upgrade/2021/TSG-21.04/clickhouse/.gitkeep diff --git a/TSG发布版本更新记录/2021/TSG-21.04/clickhouse/add_column.sql b/tsg_olap/upgrade/2021/TSG-21.04/clickhouse/add_column.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.04/clickhouse/add_column.sql rename to tsg_olap/upgrade/2021/TSG-21.04/clickhouse/add_column.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.04/clickhouse/drop_cluster.sql b/tsg_olap/upgrade/2021/TSG-21.04/clickhouse/drop_cluster.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.04/clickhouse/drop_cluster.sql rename to tsg_olap/upgrade/2021/TSG-21.04/clickhouse/drop_cluster.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.04/clickhouse/drop_query.sql b/tsg_olap/upgrade/2021/TSG-21.04/clickhouse/drop_query.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.04/clickhouse/drop_query.sql rename to tsg_olap/upgrade/2021/TSG-21.04/clickhouse/drop_query.sql diff --git a/TSG发布版本更新记录/2021/2021-02-01/galaxy-qgw-service/.gitkeep b/tsg_olap/upgrade/2021/TSG-21.05/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/2021-02-01/galaxy-qgw-service/.gitkeep rename to tsg_olap/upgrade/2021/TSG-21.05/.gitkeep diff --git a/TSG发布版本更新记录/2021/TSG-21.04/.gitkeep b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.04/.gitkeep rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/.gitkeep diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/add_table.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/add_table.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/add_table.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/add_table.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/change_colume_type_cluster.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/change_colume_type_cluster.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/change_colume_type_cluster.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/change_colume_type_cluster.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/change_colume_type_query.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/change_colume_type_query.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/change_colume_type_query.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/change_colume_type_query.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/connection_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/connection_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/connection_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/connection_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/proxy_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/proxy_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/proxy_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/proxy_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/radius_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/radius_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/radius_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/radius_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/security_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/security_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/security_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/security_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/sys_packet_capture_log.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/sys_packet_capture_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/sys_packet_capture_log.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/sys_packet_capture_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/voip_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/voip_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/voip_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.05/Clickhouse/voip_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/connection_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/connection_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/connection_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/connection_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/createAllTables/create_ck_table.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/createAllTables/create_ck_table.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/createAllTables/create_ck_table.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/createAllTables/create_ck_table.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/createAllTables/dll.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/createAllTables/dll.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/createAllTables/dll.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/createAllTables/dll.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/gtpc_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/gtpc_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/gtpc_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/gtpc_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/live_session_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/live_session_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/live_session_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/live_session_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/proxy_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/proxy_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/proxy_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/proxy_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/radius_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/radius_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/radius_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/radius_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/security_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/security_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/security_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/security_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/sys_packet_capture_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/sys_packet_capture_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/sys_packet_capture_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/sys_packet_capture_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/transaction_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/transaction_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/transaction_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/transaction_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.06/clickhouse/voip_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.06/clickhouse/voip_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.06/clickhouse/voip_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.06/clickhouse/voip_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/active_defence_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/active_defence_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/active_defence_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/active_defence_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/connection_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/connection_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/connection_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/connection_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/gtpc_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/gtpc_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/gtpc_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/gtpc_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/live_session_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/live_session_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/live_session_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/live_session_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/proxy_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/proxy_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/proxy_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/proxy_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/radius_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/radius_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/radius_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/radius_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/security_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/security_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/security_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/security_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/sys_packet_capture_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/sys_packet_capture_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/sys_packet_capture_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/sys_packet_capture_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/transaction_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/transaction_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/transaction_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/transaction_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.07/clickhouse/voip_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.07/clickhouse/voip_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.07/clickhouse/voip_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.07/clickhouse/voip_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/ck_column_2108_gal72.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/ck_column_2108_gal72.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/ck_column_2108_gal72.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/ck_column_2108_gal72.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/ck_column_2108_gal74.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/ck_column_2108_gal74.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/ck_column_2108_gal74.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/ck_column_2108_gal74.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/connection_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/connection_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/connection_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/connection_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/create_dos_tables.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/create_dos_tables.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/create_dos_tables.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/create_dos_tables.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/gtpc_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/gtpc_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/gtpc_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/gtpc_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/live_session_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/live_session_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/live_session_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/live_session_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/proxy_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/proxy_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/proxy_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/proxy_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/radius_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/radius_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/radius_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/radius_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/security_event_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/security_event_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/security_event_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/security_event_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/sys_packet_capture_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/sys_packet_capture_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/sys_packet_capture_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/sys_packet_capture_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/transaction_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/transaction_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/transaction_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/transaction_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/clickhouse/voip_record_log.sql b/tsg_olap/upgrade/2021/TSG-21.08/clickhouse/voip_record_log.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/clickhouse/voip_record_log.sql rename to tsg_olap/upgrade/2021/TSG-21.08/clickhouse/voip_record_log.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.08/druid/traffic_destination_ip_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.08/druid/traffic_destination_ip_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/druid/traffic_destination_ip_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.08/druid/traffic_destination_ip_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.08/druid/traffic_summary_log.json b/tsg_olap/upgrade/2021/TSG-21.08/druid/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/druid/traffic_summary_log.json rename to tsg_olap/upgrade/2021/TSG-21.08/druid/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.08/gohangout/bin/ghoStart/start_gohangout_k2ck_dos_event_log_tsgv3.sh b/tsg_olap/upgrade/2021/TSG-21.08/gohangout/bin/ghoStart/start_gohangout_k2ck_dos_event_log_tsgv3.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/gohangout/bin/ghoStart/start_gohangout_k2ck_dos_event_log_tsgv3.sh rename to tsg_olap/upgrade/2021/TSG-21.08/gohangout/bin/ghoStart/start_gohangout_k2ck_dos_event_log_tsgv3.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.08/gohangout/conf/k2ck_dos_event_log_tsgv3.yml b/tsg_olap/upgrade/2021/TSG-21.08/gohangout/conf/k2ck_dos_event_log_tsgv3.yml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/gohangout/conf/k2ck_dos_event_log_tsgv3.yml rename to tsg_olap/upgrade/2021/TSG-21.08/gohangout/conf/k2ck_dos_event_log_tsgv3.yml diff --git a/TSG发布版本更新记录/2021/TSG-21.08/gohangout/start_all.sh b/tsg_olap/upgrade/2021/TSG-21.08/gohangout/start_all.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.08/gohangout/start_all.sh rename to tsg_olap/upgrade/2021/TSG-21.08/gohangout/start_all.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Clickhouse/bloom_filter.sql b/tsg_olap/upgrade/2021/TSG-21.09/Clickhouse/bloom_filter.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Clickhouse/bloom_filter.sql rename to tsg_olap/upgrade/2021/TSG-21.09/Clickhouse/bloom_filter.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Clickhouse/rename.sql b/tsg_olap/upgrade/2021/TSG-21.09/Clickhouse/rename.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Clickhouse/rename.sql rename to tsg_olap/upgrade/2021/TSG-21.09/Clickhouse/rename.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks.txt b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks.txt rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/proxy_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/proxy_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/proxy_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/proxy_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/security_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/security_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/security_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/security_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/sys_storage_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/sys_storage_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/sys_storage_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/sys_storage_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_client_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_client_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_client_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_client_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_external_host_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_external_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_external_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_external_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_internal_host_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_internal_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_internal_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_internal_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_server_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_server_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_server_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_server_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_urls_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_urls_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_urls_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_urls_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_user_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_user_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_user_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_user_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_website_domain_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_website_domain_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/top_website_domain_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/top_website_domain_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_app_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_app_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_protocol_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_protocol_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_protocol_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_protocol_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_summary_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_summary_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_top_destination_ip_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_top_destination_ip_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/traffic_top_destination_ip_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/traffic_top_destination_ip_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/urls_proxy_hot.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/urls_proxy_hot.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/urls_proxy_hot.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/urls_proxy_hot.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/urls_security_hot.json b/tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/urls_security_hot.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Druid/tasks/urls_security_hot.json rename to tsg_olap/upgrade/2021/TSG-21.09/Druid/tasks/urls_security_hot.json diff --git a/TSG发布版本更新记录/2021/TSG-21.05/.gitkeep b/tsg_olap/upgrade/2021/TSG-21.09/Flink/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/.gitkeep rename to tsg_olap/upgrade/2021/TSG-21.09/Flink/.gitkeep diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-job-service/admin/logback.xml b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-job-service/admin/logback.xml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-job-service/admin/logback.xml rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-job-service/admin/logback.xml diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-job-service/executor/galaxy-job-executor b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-job-service/executor/galaxy-job-executor similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-job-service/executor/galaxy-job-executor rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-job-service/executor/galaxy-job-executor diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-job-service/executor/logback.xml b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-job-service/executor/logback.xml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-job-service/executor/logback.xml rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-job-service/executor/logback.xml diff --git a/TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/.gitkeep b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.05/Clickhouse/.gitkeep rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/.gitkeep diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/log4j2.xml b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/log4j2.xml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/log4j2.xml rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/log4j2.xml diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/active_defence_event.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/active_defence_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/active_defence_event.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/active_defence_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-filter.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-filter.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/ck-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/columns_cluster.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/columns_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/columns_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/columns_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/disks_cluster.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/disks_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/disks_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/disks_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/dos_event.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/dos_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/dos_event.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/dos_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-filter.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-filter.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/druid-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-filter.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-filter.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/engine-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/gtpc_record.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/gtpc_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/gtpc_record.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/gtpc_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/interim_session_record.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/interim_session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/interim_session_record.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/interim_session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_interim.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_interim.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_interim.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_interim.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_session.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_session.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_session.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/liveChart_session.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/meta_data.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/meta_data.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/meta_data.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/meta_data.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/parts_cluster.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/parts_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/parts_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/parts_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/processes.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/processes.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/processes.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/processes.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/proxy_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/public_schema_info.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/public_schema_info.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/public_schema_info.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/public_schema_info.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log_cluster.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/query_log_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_onff_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_onff_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_onff_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_onff_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_record.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_record.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/radius_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/sd_multi_access_cnt_feature.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/sd_multi_access_cnt_feature.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/sd_multi_access_cnt_feature.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/sd_multi_access_cnt_feature.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/security_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_client_ip.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_client_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_client_ip.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_client_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_server_ip.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_server_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_server_ip.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_common_server_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_http_domain.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_http_domain.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_http_domain.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/session_record_http_domain.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_packet_capture_event.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_packet_capture_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_packet_capture_event.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_packet_capture_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_storage_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_storage_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_storage_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/sys_storage_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/tables_cluster.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/tables_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/tables_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/tables_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_client_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_client_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_client_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_client_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_external_host_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_external_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_external_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_external_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_internal_host_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_internal_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_internal_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_internal_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_server_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_server_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_server_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_server_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_urls_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_urls_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_urls_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_urls_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_user_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_user_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_user_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_user_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_website_domain_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_website_domain_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/top_website_domain_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/top_website_domain_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_app_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_app_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_protocol_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_protocol_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_protocol_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_protocol_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_summary_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_summary_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_top_destination_ip_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_top_destination_ip_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_top_destination_ip_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/traffic_top_destination_ip_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/transaction_record.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/transaction_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/transaction_record.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/transaction_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/version.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/version.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/version.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/version.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/voip_record.json b/tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/voip_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/schema/voip_record.json rename to tsg_olap/upgrade/2021/TSG-21.09/Galaxy-qgw-service/schema/voip_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Flink/.gitkeep b/tsg_olap/upgrade/2021/TSG-21.09/Gohangout/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Flink/.gitkeep rename to tsg_olap/upgrade/2021/TSG-21.09/Gohangout/.gitkeep diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Nginx/nginx.conf b/tsg_olap/upgrade/2021/TSG-21.09/Nginx/nginx.conf similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Nginx/nginx.conf rename to tsg_olap/upgrade/2021/TSG-21.09/Nginx/nginx.conf diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Nginx/self-sign.crt b/tsg_olap/upgrade/2021/TSG-21.09/Nginx/self-sign.crt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Nginx/self-sign.crt rename to tsg_olap/upgrade/2021/TSG-21.09/Nginx/self-sign.crt diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Nginx/self-sign.key b/tsg_olap/upgrade/2021/TSG-21.09/Nginx/self-sign.key similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Nginx/self-sign.key rename to tsg_olap/upgrade/2021/TSG-21.09/Nginx/self-sign.key diff --git a/TSG发布版本更新记录/2021/TSG-21.09/dos-detection/create_hbase_table b/tsg_olap/upgrade/2021/TSG-21.09/dos-detection/create_hbase_table similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/dos-detection/create_hbase_table rename to tsg_olap/upgrade/2021/TSG-21.09/dos-detection/create_hbase_table diff --git a/TSG发布版本更新记录/2021/TSG-21.10/Clickhouse/add.sql b/tsg_olap/upgrade/2021/TSG-21.10/Clickhouse/add.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/Clickhouse/add.sql rename to tsg_olap/upgrade/2021/TSG-21.10/Clickhouse/add.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.10/docker/daemon.json b/tsg_olap/upgrade/2021/TSG-21.10/docker/daemon.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/docker/daemon.json rename to tsg_olap/upgrade/2021/TSG-21.10/docker/daemon.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/druid/segments/druid_segments.sql b/tsg_olap/upgrade/2021/TSG-21.10/druid/segments/druid_segments.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/druid/segments/druid_segments.sql rename to tsg_olap/upgrade/2021/TSG-21.10/druid/segments/druid_segments.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.10/druid/segments/traffic_protocol_stat_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_09.080Z/0_index.zip b/tsg_olap/upgrade/2021/TSG-21.10/druid/segments/traffic_protocol_stat_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_09.080Z/0_index.zip similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/druid/segments/traffic_protocol_stat_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_09.080Z/0_index.zip rename to tsg_olap/upgrade/2021/TSG-21.10/druid/segments/traffic_protocol_stat_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_09.080Z/0_index.zip diff --git a/TSG发布版本更新记录/2021/TSG-21.10/druid/segments/traffic_summary_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_00.558Z/0_index.zip b/tsg_olap/upgrade/2021/TSG-21.10/druid/segments/traffic_summary_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_00.558Z/0_index.zip similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/druid/segments/traffic_summary_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_00.558Z/0_index.zip rename to tsg_olap/upgrade/2021/TSG-21.10/druid/segments/traffic_summary_log/30000101T000000.000Z_30000102T000000.000Z/2021-10-12T01_50_00.558Z/0_index.zip diff --git a/TSG发布版本更新记录/2021/TSG-21.10/druid/traffic_protocol_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.10/druid/traffic_protocol_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/druid/traffic_protocol_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/druid/traffic_protocol_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/druid/traffic_summary_log.json b/tsg_olap/upgrade/2021/TSG-21.10/druid/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/druid/traffic_summary_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/druid/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/flink/completion/log-completion-schema-210928-flattenSpec.jar b/tsg_olap/upgrade/2021/TSG-21.10/flink/completion/log-completion-schema-210928-flattenSpec.jar similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/flink/completion/log-completion-schema-210928-flattenSpec.jar rename to tsg_olap/upgrade/2021/TSG-21.10/flink/completion/log-completion-schema-210928-flattenSpec.jar diff --git a/TSG发布版本更新记录/2021/TSG-21.10/flink/livecharts/log-olap-analysis-schema-210928-flattenSpec.jar b/tsg_olap/upgrade/2021/TSG-21.10/flink/livecharts/log-olap-analysis-schema-210928-flattenSpec.jar similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/flink/livecharts/log-olap-analysis-schema-210928-flattenSpec.jar rename to tsg_olap/upgrade/2021/TSG-21.10/flink/livecharts/log-olap-analysis-schema-210928-flattenSpec.jar diff --git a/TSG发布版本更新记录/2021/TSG-21.10/job/xxl_job_info b/tsg_olap/upgrade/2021/TSG-21.10/job/xxl_job_info similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/job/xxl_job_info rename to tsg_olap/upgrade/2021/TSG-21.10/job/xxl_job_info diff --git a/TSG发布版本更新记录/2021/TSG-21.10/node_exporter/docker-compose.yml b/tsg_olap/upgrade/2021/TSG-21.10/node_exporter/docker-compose.yml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/node_exporter/docker-compose.yml rename to tsg_olap/upgrade/2021/TSG-21.10/node_exporter/docker-compose.yml diff --git a/TSG发布版本更新记录/2021/TSG-21.10/node_exporter/node-exporter.tar b/tsg_olap/upgrade/2021/TSG-21.10/node_exporter/node-exporter.tar similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/node_exporter/node-exporter.tar rename to tsg_olap/upgrade/2021/TSG-21.10/node_exporter/node-exporter.tar diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/active_defence_event.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/active_defence_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/active_defence_event.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/active_defence_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/ck-filter.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/ck-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/ck-filter.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/ck-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/ck-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/ck-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/ck-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/ck-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/columns_cluster.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/columns_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/columns_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/columns_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/disks_cluster.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/disks_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/disks_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/disks_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/dos_event.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/dos_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/dos_event.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/dos_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/druid-filter.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/druid-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/druid-filter.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/druid-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/druid-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/druid-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/druid-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/druid-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/engine-filter.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/engine-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/engine-filter.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/engine-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/engine-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/engine-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/engine-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/engine-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/gtpc_record.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/gtpc_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/gtpc_record.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/gtpc_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/interim_session_record.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/interim_session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/interim_session_record.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/interim_session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/liveChart_interim.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/liveChart_interim.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/liveChart_interim.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/liveChart_interim.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/liveChart_session.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/liveChart_session.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/liveChart_session.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/liveChart_session.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/meta_data.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/meta_data.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/meta_data.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/meta_data.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/parts_cluster.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/parts_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/parts_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/parts_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/processes.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/processes.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/processes.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/processes.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/proxy_event.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/proxy_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/proxy_event.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/proxy_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/proxy_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/proxy_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/proxy_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/proxy_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/public_schema_info.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/public_schema_info.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/public_schema_info.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/public_schema_info.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/query_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/query_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/query_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/query_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/query_log_cluster.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/query_log_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/query_log_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/query_log_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/radius_onff_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/radius_onff_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/radius_onff_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/radius_onff_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/radius_record.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/radius_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/radius_record.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/radius_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/security_event.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/security_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/security_event.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/security_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/security_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/security_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/security_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/security_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record_common_client_ip.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record_common_client_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record_common_client_ip.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record_common_client_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record_common_server_ip.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record_common_server_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record_common_server_ip.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record_common_server_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record_http_domain.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record_http_domain.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/session_record_http_domain.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/session_record_http_domain.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/sys_packet_capture_event.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/sys_packet_capture_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/sys_packet_capture_event.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/sys_packet_capture_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/sys_storage_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/sys_storage_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/sys_storage_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/sys_storage_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/tables_cluster.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/tables_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/tables_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/tables_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_client_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_client_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_client_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_client_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_external_host_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_external_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_external_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_external_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_internal_host_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_internal_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_internal_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_internal_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_server_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_server_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_server_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_server_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_urls_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_urls_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_urls_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_urls_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_user_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_user_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_user_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_user_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_website_domain_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_website_domain_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/top_website_domain_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/top_website_domain_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_app_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_app_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_protocol_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_protocol_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_protocol_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_protocol_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_summary_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_summary_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_top_destination_ip_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_top_destination_ip_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/traffic_top_destination_ip_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/traffic_top_destination_ip_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/transaction_record.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/transaction_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/transaction_record.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/transaction_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/version.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/version.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/version.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/version.json diff --git a/TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/voip_record.json b/tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/voip_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.10/qgw/schema/voip_record.json rename to tsg_olap/upgrade/2021/TSG-21.10/qgw/schema/voip_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/Clickhouse/21.11add sql.txt b/tsg_olap/upgrade/2021/TSG-21.11/Clickhouse/21.11add sql.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/Clickhouse/21.11add sql.txt rename to tsg_olap/upgrade/2021/TSG-21.11/Clickhouse/21.11add sql.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.11/flink/cluster-flink-conf.yml b/tsg_olap/upgrade/2021/TSG-21.11/flink/cluster-flink-conf.yml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/flink/cluster-flink-conf.yml rename to tsg_olap/upgrade/2021/TSG-21.11/flink/cluster-flink-conf.yml diff --git a/TSG发布版本更新记录/2021/TSG-21.11/flink/docker-compose.yml b/tsg_olap/upgrade/2021/TSG-21.11/flink/docker-compose.yml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/flink/docker-compose.yml rename to tsg_olap/upgrade/2021/TSG-21.11/flink/docker-compose.yml diff --git a/TSG发布版本更新记录/2021/TSG-21.11/flink/standalone-flink.conf.yml b/tsg_olap/upgrade/2021/TSG-21.11/flink/standalone-flink.conf.yml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/flink/standalone-flink.conf.yml rename to tsg_olap/upgrade/2021/TSG-21.11/flink/standalone-flink.conf.yml diff --git a/TSG发布版本更新记录/2021/TSG-21.11/hbase/create_table b/tsg_olap/upgrade/2021/TSG-21.11/hbase/create_table similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/hbase/create_table rename to tsg_olap/upgrade/2021/TSG-21.11/hbase/create_table diff --git a/TSG发布版本更新记录/2021/TSG-21.11/hbase/hbase-site.xml b/tsg_olap/upgrade/2021/TSG-21.11/hbase/hbase-site.xml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/hbase/hbase-site.xml rename to tsg_olap/upgrade/2021/TSG-21.11/hbase/hbase-site.xml diff --git a/TSG发布版本更新记录/2021/TSG-21.11/job/xxl_job.sql b/tsg_olap/upgrade/2021/TSG-21.11/job/xxl_job.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/job/xxl_job.sql rename to tsg_olap/upgrade/2021/TSG-21.11/job/xxl_job.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.11/nginx/nginx.conf b/tsg_olap/upgrade/2021/TSG-21.11/nginx/nginx.conf similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/nginx/nginx.conf rename to tsg_olap/upgrade/2021/TSG-21.11/nginx/nginx.conf diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/galaxy-qgw-service.yml b/tsg_olap/upgrade/2021/TSG-21.11/qgw/galaxy-qgw-service.yml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/galaxy-qgw-service.yml rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/galaxy-qgw-service.yml diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/active_defence_event.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/active_defence_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/active_defence_event.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/active_defence_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/ck-filter.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/ck-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/ck-filter.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/ck-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/ck-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/ck-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/ck-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/ck-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/columns_cluster.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/columns_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/columns_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/columns_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/disks_cluster.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/disks_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/disks_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/disks_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/dos_event.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/dos_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/dos_event.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/dos_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/druid-filter.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/druid-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/druid-filter.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/druid-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/druid-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/druid-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/druid-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/druid-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/engine-filter.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/engine-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/engine-filter.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/engine-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/engine-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/engine-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/engine-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/engine-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/gtpc_record.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/gtpc_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/gtpc_record.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/gtpc_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/interim_session_record.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/interim_session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/interim_session_record.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/interim_session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/liveChart_interim.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/liveChart_interim.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/liveChart_interim.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/liveChart_interim.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/liveChart_session.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/liveChart_session.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/liveChart_session.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/liveChart_session.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/meta_data.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/meta_data.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/meta_data.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/meta_data.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/parts_cluster.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/parts_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/parts_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/parts_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/processes.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/processes.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/processes.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/processes.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/proxy_event.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/proxy_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/proxy_event.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/proxy_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/proxy_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/proxy_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/proxy_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/proxy_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/public_schema_info.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/public_schema_info.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/public_schema_info.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/public_schema_info.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/query_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/query_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/query_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/query_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/query_log_cluster.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/query_log_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/query_log_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/query_log_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/radius_onff_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/radius_onff_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/radius_onff_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/radius_onff_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/radius_record.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/radius_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/radius_record.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/radius_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/relation_account_framedip.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/relation_account_framedip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/relation_account_framedip.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/relation_account_framedip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/report_result.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/report_result.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/report_result.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/report_result.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/security_event.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/security_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/security_event.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/security_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/security_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/security_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/security_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/security_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record_common_client_ip.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record_common_client_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record_common_client_ip.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record_common_client_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record_common_server_ip.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record_common_server_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record_common_server_ip.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record_common_server_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record_http_domain.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record_http_domain.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/session_record_http_domain.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/session_record_http_domain.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/sys_packet_capture_event.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/sys_packet_capture_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/sys_packet_capture_event.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/sys_packet_capture_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/sys_storage_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/sys_storage_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/sys_storage_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/sys_storage_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/tables_cluster.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/tables_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/tables_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/tables_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_client_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_client_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_client_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_client_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_external_host_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_external_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_external_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_external_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_internal_host_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_internal_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_internal_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_internal_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_server_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_server_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_server_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_server_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_urls_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_urls_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_urls_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_urls_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_user_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_user_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_user_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_user_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_website_domain_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_website_domain_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/top_website_domain_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/top_website_domain_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_app_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_app_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_protocol_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_protocol_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_protocol_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_protocol_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_summary_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_summary_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_top_destination_ip_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_top_destination_ip_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/traffic_top_destination_ip_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/traffic_top_destination_ip_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/transaction_record.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/transaction_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/transaction_record.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/transaction_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/version.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/version.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/version.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/version.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/voip_record.json b/tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/voip_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/qgw/schema/voip_record.json rename to tsg_olap/upgrade/2021/TSG-21.11/qgw/schema/voip_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.11/record-21.11.txt b/tsg_olap/upgrade/2021/TSG-21.11/record-21.11.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.11/record-21.11.txt rename to tsg_olap/upgrade/2021/TSG-21.11/record-21.11.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/clickhouse/config.xml b/tsg_olap/upgrade/2021/TSG-21.12/clickhouse/config.xml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/clickhouse/config.xml rename to tsg_olap/upgrade/2021/TSG-21.12/clickhouse/config.xml diff --git a/TSG发布版本更新记录/2021/TSG-21.12/clickhouse/update-ck-21.12.sql b/tsg_olap/upgrade/2021/TSG-21.12/clickhouse/update-ck-21.12.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/clickhouse/update-ck-21.12.sql rename to tsg_olap/upgrade/2021/TSG-21.12/clickhouse/update-ck-21.12.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/README.txt b/tsg_olap/upgrade/2021/TSG-21.12/druid/README.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/README.txt rename to tsg_olap/upgrade/2021/TSG-21.12/druid/README.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/cluster/traffic_metrics_log.zip b/tsg_olap/upgrade/2021/TSG-21.12/druid/cluster/traffic_metrics_log.zip similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/cluster/traffic_metrics_log.zip rename to tsg_olap/upgrade/2021/TSG-21.12/druid/cluster/traffic_metrics_log.zip diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/init_traffic_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.12/druid/init_traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/init_traffic_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/druid/init_traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/log4j2.component.properties b/tsg_olap/upgrade/2021/TSG-21.12/druid/log4j2.component.properties similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/log4j2.component.properties rename to tsg_olap/upgrade/2021/TSG-21.12/druid/log4j2.component.properties diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/standalone/traffic_metrics_log.zip b/tsg_olap/upgrade/2021/TSG-21.12/druid/standalone/traffic_metrics_log.zip similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/standalone/traffic_metrics_log.zip rename to tsg_olap/upgrade/2021/TSG-21.12/druid/standalone/traffic_metrics_log.zip diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/traffic_app_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.12/druid/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/traffic_app_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/druid/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/traffic_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.12/druid/traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/traffic_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/druid/traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/druid/update-druid-21.12.sql b/tsg_olap/upgrade/2021/TSG-21.12/druid/update-druid-21.12.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/druid/update-druid-21.12.sql rename to tsg_olap/upgrade/2021/TSG-21.12/druid/update-druid-21.12.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/flink/config.sh b/tsg_olap/upgrade/2021/TSG-21.12/flink/config.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/flink/config.sh rename to tsg_olap/upgrade/2021/TSG-21.12/flink/config.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.12/flink/log4j2.component.properties b/tsg_olap/upgrade/2021/TSG-21.12/flink/log4j2.component.properties similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/flink/log4j2.component.properties rename to tsg_olap/upgrade/2021/TSG-21.12/flink/log4j2.component.properties diff --git a/TSG发布版本更新记录/2021/TSG-21.12/hbase/update-hbase.txt b/tsg_olap/upgrade/2021/TSG-21.12/hbase/update-hbase.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/hbase/update-hbase.txt rename to tsg_olap/upgrade/2021/TSG-21.12/hbase/update-hbase.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/hbase/update-phoenix.txt b/tsg_olap/upgrade/2021/TSG-21.12/hbase/update-phoenix.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/hbase/update-phoenix.txt rename to tsg_olap/upgrade/2021/TSG-21.12/hbase/update-phoenix.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/job/xxl_job.sql b/tsg_olap/upgrade/2021/TSG-21.12/job/xxl_job.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/job/xxl_job.sql rename to tsg_olap/upgrade/2021/TSG-21.12/job/xxl_job.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/kafka/add-topic.txt b/tsg_olap/upgrade/2021/TSG-21.12/kafka/add-topic.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/kafka/add-topic.txt rename to tsg_olap/upgrade/2021/TSG-21.12/kafka/add-topic.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/nacos/README.txt b/tsg_olap/upgrade/2021/TSG-21.12/nacos/README.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/nacos/README.txt rename to tsg_olap/upgrade/2021/TSG-21.12/nacos/README.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/README.txt b/tsg_olap/upgrade/2021/TSG-21.12/qgw/README.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/README.txt rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/README.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/backup_config.sh b/tsg_olap/upgrade/2021/TSG-21.12/qgw/backup_config.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/backup_config.sh rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/backup_config.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/active_defence_event.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/active_defence_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/active_defence_event.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/active_defence_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-filter.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-filter.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/ck-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/columns_cluster.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/columns_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/columns_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/columns_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/disks_cluster.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/disks_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/disks_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/disks_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/dos_event.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/dos_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/dos_event.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/dos_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-filter.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-filter.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/druid-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-filter.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-filter.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/engine-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/gtpc_record.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/gtpc_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/gtpc_record.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/gtpc_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-filter.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-filter.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-filter.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-filter.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-queries-template.sql b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-queries-template.sql rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/hbase-queries-template.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/interim_session_record.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/interim_session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/interim_session_record.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/interim_session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/job_result.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/job_result.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/job_result.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/job_result.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_interim.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_interim.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_interim.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_interim.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_session.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_session.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_session.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/liveChart_session.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/meta_data.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/meta_data.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/meta_data.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/meta_data.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/parts_cluster.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/parts_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/parts_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/parts_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/processes.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/processes.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/processes.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/processes.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/proxy_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/public_schema_info.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/public_schema_info.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/public_schema_info.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/public_schema_info.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log_cluster.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/query_log_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_onff_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_onff_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_onff_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_onff_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_record.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_record.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/radius_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/recommendation_app_cip.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/recommendation_app_cip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/recommendation_app_cip.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/recommendation_app_cip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/relation_account_framedip.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/relation_account_framedip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/relation_account_framedip.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/relation_account_framedip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/report_result.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/report_result.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/report_result.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/report_result.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event_hits_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event_hits_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/security_event_hits_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_client_ip.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_client_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_client_ip.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_client_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_server_ip.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_server_ip.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_server_ip.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_common_server_ip.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_http_domain.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_http_domain.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_http_domain.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/session_record_http_domain.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_packet_capture_event.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_packet_capture_event.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_packet_capture_event.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_packet_capture_event.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_storage_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_storage_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_storage_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/sys_storage_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/tables_cluster.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/tables_cluster.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/tables_cluster.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/tables_cluster.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_client_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_client_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_client_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_client_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_external_host_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_external_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_external_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_external_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_internal_host_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_internal_host_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_internal_host_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_internal_host_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_server_ip_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_server_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_server_ip_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_server_ip_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_urls_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_urls_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_urls_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_urls_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_user_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_user_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_user_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_user_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_website_domain_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_website_domain_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_website_domain_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/top_website_domain_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_app_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_app_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_protocol_stat_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_protocol_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_protocol_stat_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_protocol_stat_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_summary_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_summary_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_top_destination_ip_metrics_log.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_top_destination_ip_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_top_destination_ip_metrics_log.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/traffic_top_destination_ip_metrics_log.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/transaction_record.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/transaction_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/transaction_record.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/transaction_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/version.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/version.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/version.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/version.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/voip_record.json b/tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/voip_record.json similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/galaxy-qgw-service/config/voip_record.json rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/galaxy-qgw-service/config/voip_record.json diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/push_config.sh b/tsg_olap/upgrade/2021/TSG-21.12/qgw/push_config.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/push_config.sh rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/push_config.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.12/qgw/update-galaxy-qgw-service.yml b/tsg_olap/upgrade/2021/TSG-21.12/qgw/update-galaxy-qgw-service.yml similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/qgw/update-galaxy-qgw-service.yml rename to tsg_olap/upgrade/2021/TSG-21.12/qgw/update-galaxy-qgw-service.yml diff --git a/TSG发布版本更新记录/2021/TSG-21.12/record-21.12.txt b/tsg_olap/upgrade/2021/TSG-21.12/record-21.12.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/record-21.12.txt rename to tsg_olap/upgrade/2021/TSG-21.12/record-21.12.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/spark/update-spark-conf.txt b/tsg_olap/upgrade/2021/TSG-21.12/spark/update-spark-conf.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/spark/update-spark-conf.txt rename to tsg_olap/upgrade/2021/TSG-21.12/spark/update-spark-conf.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/README.txt b/tsg_olap/upgrade/2021/TSG-21.12/topology/README.txt similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/README.txt rename to tsg_olap/upgrade/2021/TSG-21.12/topology/README.txt diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/account-framedip-Hbase/config/RADIUS-RELATIONSHIP-HBASE-V2 b/tsg_olap/upgrade/2021/TSG-21.12/topology/account-framedip-Hbase/config/RADIUS-RELATIONSHIP-HBASE-V2 similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/account-framedip-Hbase/config/RADIUS-RELATIONSHIP-HBASE-V2 rename to tsg_olap/upgrade/2021/TSG-21.12/topology/account-framedip-Hbase/config/RADIUS-RELATIONSHIP-HBASE-V2 diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/account-framedip-Hbase/start.sh b/tsg_olap/upgrade/2021/TSG-21.12/topology/account-framedip-Hbase/start.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/account-framedip-Hbase/start.sh rename to tsg_olap/upgrade/2021/TSG-21.12/topology/account-framedip-Hbase/start.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/account-framedip-Hbase/stop.sh b/tsg_olap/upgrade/2021/TSG-21.12/topology/account-framedip-Hbase/stop.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/account-framedip-Hbase/stop.sh rename to tsg_olap/upgrade/2021/TSG-21.12/topology/account-framedip-Hbase/stop.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/dos-detection/update-config b/tsg_olap/upgrade/2021/TSG-21.12/topology/dos-detection/update-config similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/dos-detection/update-config rename to tsg_olap/upgrade/2021/TSG-21.12/topology/dos-detection/update-config diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/flink-top/kafka-flinksql-top.sql b/tsg_olap/upgrade/2021/TSG-21.12/topology/flink-top/kafka-flinksql-top.sql similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/flink-top/kafka-flinksql-top.sql rename to tsg_olap/upgrade/2021/TSG-21.12/topology/flink-top/kafka-flinksql-top.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/vpn-recommend/config/RECOMMENDATION-APP-CIP b/tsg_olap/upgrade/2021/TSG-21.12/topology/vpn-recommend/config/RECOMMENDATION-APP-CIP similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/vpn-recommend/config/RECOMMENDATION-APP-CIP rename to tsg_olap/upgrade/2021/TSG-21.12/topology/vpn-recommend/config/RECOMMENDATION-APP-CIP diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/vpn-recommend/start.sh b/tsg_olap/upgrade/2021/TSG-21.12/topology/vpn-recommend/start.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/vpn-recommend/start.sh rename to tsg_olap/upgrade/2021/TSG-21.12/topology/vpn-recommend/start.sh diff --git a/TSG发布版本更新记录/2021/TSG-21.12/topology/vpn-recommend/stop.sh b/tsg_olap/upgrade/2021/TSG-21.12/topology/vpn-recommend/stop.sh similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.12/topology/vpn-recommend/stop.sh rename to tsg_olap/upgrade/2021/TSG-21.12/topology/vpn-recommend/stop.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.01/README.txt b/tsg_olap/upgrade/2022/TSG-22.01/README.txt similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.01/README.txt rename to tsg_olap/upgrade/2022/TSG-22.01/README.txt diff --git a/TSG发布版本更新记录/2022/TSG-22.01/clickhouse/update-01-ck.sql b/tsg_olap/upgrade/2022/TSG-22.01/clickhouse/update-01-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.01/clickhouse/update-01-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.01/clickhouse/update-01-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.01/docker/jdk.yml b/tsg_olap/upgrade/2022/TSG-22.01/docker/jdk.yml similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.01/docker/jdk.yml rename to tsg_olap/upgrade/2022/TSG-22.01/docker/jdk.yml diff --git a/TSG发布版本更新记录/2022/TSG-22.01/gohangout/README.txt b/tsg_olap/upgrade/2022/TSG-22.01/gohangout/README.txt similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.01/gohangout/README.txt rename to tsg_olap/upgrade/2022/TSG-22.01/gohangout/README.txt diff --git a/TSG发布版本更新记录/2022/TSG-22.01/kafka/add-topic.txt b/tsg_olap/upgrade/2022/TSG-22.01/kafka/add-topic.txt similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.01/kafka/add-topic.txt rename to tsg_olap/upgrade/2022/TSG-22.01/kafka/add-topic.txt diff --git a/TSG发布版本更新记录/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_INTERIM-SESSION-RECORD b/tsg_olap/upgrade/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_INTERIM-SESSION-RECORD similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_INTERIM-SESSION-RECORD rename to tsg_olap/upgrade/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_INTERIM-SESSION-RECORD diff --git a/TSG发布版本更新记录/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_SESSION-RECORD b/tsg_olap/upgrade/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_SESSION-RECORD similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_SESSION-RECORD rename to tsg_olap/upgrade/2022/TSG-22.01/topology/livechart/LIVE-CHARTS_SESSION-RECORD diff --git a/TSG发布版本更新记录/2022/TSG-22.02/clickhouse/update-02-ck.sql b/tsg_olap/upgrade/2022/TSG-22.02/clickhouse/update-02-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/clickhouse/update-02-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.02/clickhouse/update-02-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.02/hbase/update-phoenix.txt b/tsg_olap/upgrade/2022/TSG-22.02/hbase/update-phoenix.txt similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/hbase/update-phoenix.txt rename to tsg_olap/upgrade/2022/TSG-22.02/hbase/update-phoenix.txt diff --git a/TSG发布版本更新记录/2022/TSG-22.02/hos/create_bucket.txt b/tsg_olap/upgrade/2022/TSG-22.02/hos/create_bucket.txt similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/hos/create_bucket.txt rename to tsg_olap/upgrade/2022/TSG-22.02/hos/create_bucket.txt diff --git a/TSG发布版本更新记录/2022/TSG-22.02/job/add_job.pdf b/tsg_olap/upgrade/2022/TSG-22.02/job/add_job.pdf similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/job/add_job.pdf rename to tsg_olap/upgrade/2022/TSG-22.02/job/add_job.pdf diff --git a/TSG发布版本更新记录/2022/TSG-22.02/job/docker-compose.yml b/tsg_olap/upgrade/2022/TSG-22.02/job/docker-compose.yml similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/job/docker-compose.yml rename to tsg_olap/upgrade/2022/TSG-22.02/job/docker-compose.yml diff --git a/TSG发布版本更新记录/2022/TSG-22.02/job/update-02-job.sql b/tsg_olap/upgrade/2022/TSG-22.02/job/update-02-job.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/job/update-02-job.sql rename to tsg_olap/upgrade/2022/TSG-22.02/job/update-02-job.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.02/qgw/galaxy-qgw-service.yml b/tsg_olap/upgrade/2022/TSG-22.02/qgw/galaxy-qgw-service.yml similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/qgw/galaxy-qgw-service.yml rename to tsg_olap/upgrade/2022/TSG-22.02/qgw/galaxy-qgw-service.yml diff --git a/TSG发布版本更新记录/2022/TSG-22.02/topology/completion/readme.md b/tsg_olap/upgrade/2022/TSG-22.02/topology/completion/readme.md similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/topology/completion/readme.md rename to tsg_olap/upgrade/2022/TSG-22.02/topology/completion/readme.md diff --git a/TSG发布版本更新记录/2022/TSG-22.02/topology/dos-detection/readme.md b/tsg_olap/upgrade/2022/TSG-22.02/topology/dos-detection/readme.md similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.02/topology/dos-detection/readme.md rename to tsg_olap/upgrade/2022/TSG-22.02/topology/dos-detection/readme.md diff --git a/TSG发布版本更新记录/2022/TSG-22.03/clickhouse/ck_monitor.sh b/tsg_olap/upgrade/2022/TSG-22.03/clickhouse/ck_monitor.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.03/clickhouse/ck_monitor.sh rename to tsg_olap/upgrade/2022/TSG-22.03/clickhouse/ck_monitor.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.03/clickhouse/update-03-ck.sql b/tsg_olap/upgrade/2022/TSG-22.03/clickhouse/update-03-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.03/clickhouse/update-03-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.03/clickhouse/update-03-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.03/job/admin/logback.xml b/tsg_olap/upgrade/2022/TSG-22.03/job/admin/logback.xml similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.03/job/admin/logback.xml rename to tsg_olap/upgrade/2022/TSG-22.03/job/admin/logback.xml diff --git a/TSG发布版本更新记录/2022/TSG-22.03/job/executor/logback.xml b/tsg_olap/upgrade/2022/TSG-22.03/job/executor/logback.xml similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.03/job/executor/logback.xml rename to tsg_olap/upgrade/2022/TSG-22.03/job/executor/logback.xml diff --git a/TSG发布版本更新记录/2022/TSG-22.04/Galaxy_22.04更新文档.docx b/tsg_olap/upgrade/2022/TSG-22.04/Galaxy_22.04更新文档.docx similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/Galaxy_22.04更新文档.docx rename to tsg_olap/upgrade/2022/TSG-22.04/Galaxy_22.04更新文档.docx diff --git a/TSG发布版本更新记录/2022/TSG-22.04/Galaxy_22.04第二次更新文档.docx b/tsg_olap/upgrade/2022/TSG-22.04/Galaxy_22.04第二次更新文档.docx similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/Galaxy_22.04第二次更新文档.docx rename to tsg_olap/upgrade/2022/TSG-22.04/Galaxy_22.04第二次更新文档.docx diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/cluster/segments_22_04.zip b/tsg_olap/upgrade/2022/TSG-22.04/druid/cluster/segments_22_04.zip similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/cluster/segments_22_04.zip rename to tsg_olap/upgrade/2022/TSG-22.04/druid/cluster/segments_22_04.zip diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/standalone/segments_22_04.zip b/tsg_olap/upgrade/2022/TSG-22.04/druid/standalone/segments_22_04.zip similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/standalone/segments_22_04.zip rename to tsg_olap/upgrade/2022/TSG-22.04/druid/standalone/segments_22_04.zip diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/top_client_ip_log.json b/tsg_olap/upgrade/2022/TSG-22.04/druid/top_client_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/top_client_ip_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/druid/top_client_ip_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/top_external_host_log.json b/tsg_olap/upgrade/2022/TSG-22.04/druid/top_external_host_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/top_external_host_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/druid/top_external_host_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/top_internal_host_log.json b/tsg_olap/upgrade/2022/TSG-22.04/druid/top_internal_host_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/top_internal_host_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/druid/top_internal_host_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/top_server_ip_log.json b/tsg_olap/upgrade/2022/TSG-22.04/druid/top_server_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/top_server_ip_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/druid/top_server_ip_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/top_user_log.json b/tsg_olap/upgrade/2022/TSG-22.04/druid/top_user_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/top_user_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/druid/top_user_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/top_website_domain_log.json b/tsg_olap/upgrade/2022/TSG-22.04/druid/top_website_domain_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/top_website_domain_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/druid/top_website_domain_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/druid/traffic_app_stat_log.json b/tsg_olap/upgrade/2022/TSG-22.04/druid/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/druid/traffic_app_stat_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/druid/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-ACTIVE-DEFENCE-EVENT-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-ACTIVE-DEFENCE-EVENT-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-ACTIVE-DEFENCE-EVENT-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-ACTIVE-DEFENCE-EVENT-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-GTPC-RECORD-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-GTPC-RECORD-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-GTPC-RECORD-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-GTPC-RECORD-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-INTERIM-SESSION-RECORD-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-INTERIM-SESSION-RECORD-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-INTERIM-SESSION-RECORD-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-INTERIM-SESSION-RECORD-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-PROXY-EVENT-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-PROXY-EVENT-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-PROXY-EVENT-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-PROXY-EVENT-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-RADIUS-RECORD-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-RADIUS-RECORD-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-RADIUS-RECORD-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-RADIUS-RECORD-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-SECURITY-EVENT-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-SECURITY-EVENT-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-SECURITY-EVENT-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-SECURITY-EVENT-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-SESSION-RECORD-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-SESSION-RECORD-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-SESSION-RECORD-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-SESSION-RECORD-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-SYS-PACKET-CAPTURE-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-SYS-PACKET-CAPTURE-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-SYS-PACKET-CAPTURE-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-SYS-PACKET-CAPTURE-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-TRANSACTION-RECORD-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-TRANSACTION-RECORD-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-TRANSACTION-RECORD-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-TRANSACTION-RECORD-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-VOIP-RECORD-COMPLETED b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-VOIP-RECORD-COMPLETED similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/config/ETL-VOIP-RECORD-COMPLETED rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/config/ETL-VOIP-RECORD-COMPLETED diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/completion/start.sh b/tsg_olap/upgrade/2022/TSG-22.04/flink/completion/start.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/completion/start.sh rename to tsg_olap/upgrade/2022/TSG-22.04/flink/completion/start.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/kafka-flinksql-top.sql b/tsg_olap/upgrade/2022/TSG-22.04/flink/kafka-flinksql-top.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/kafka-flinksql-top.sql rename to tsg_olap/upgrade/2022/TSG-22.04/flink/kafka-flinksql-top.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_INTERIM-SESSION-RECORD b/tsg_olap/upgrade/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_INTERIM-SESSION-RECORD similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_INTERIM-SESSION-RECORD rename to tsg_olap/upgrade/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_INTERIM-SESSION-RECORD diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_SESSION-RECORD b/tsg_olap/upgrade/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_SESSION-RECORD similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_SESSION-RECORD rename to tsg_olap/upgrade/2022/TSG-22.04/flink/livecharts/config/LIVE-CHARTS_SESSION-RECORD diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/livecharts/start.sh b/tsg_olap/upgrade/2022/TSG-22.04/flink/livecharts/start.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/livecharts/start.sh rename to tsg_olap/upgrade/2022/TSG-22.04/flink/livecharts/start.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/radiusOnOff/start.sh b/tsg_olap/upgrade/2022/TSG-22.04/flink/radiusOnOff/start.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/radiusOnOff/start.sh rename to tsg_olap/upgrade/2022/TSG-22.04/flink/radiusOnOff/start.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.04/flink/voipRelation/start.sh b/tsg_olap/upgrade/2022/TSG-22.04/flink/voipRelation/start.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/flink/voipRelation/start.sh rename to tsg_olap/upgrade/2022/TSG-22.04/flink/voipRelation/start.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/ck-filter.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/ck-filter.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/ck-filter.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/ck-filter.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/ck-queries-template.sql b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/ck-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/ck-queries-template.sql rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/ck-queries-template.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/druid-filter.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/druid-filter.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/druid-filter.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/druid-filter.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/druid-queries-template.sql b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/druid-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/druid-queries-template.sql rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/druid-queries-template.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/engine-filter.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/engine-filter.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/engine-filter.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/engine-filter.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/engine-queries-template.sql b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/engine-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/engine-queries-template.sql rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/engine-queries-template.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/hbase-filter.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/hbase-filter.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/hbase-filter.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/hbase-filter.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/hbase-queries-template.sql b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/hbase-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/hbase-queries-template.sql rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/hbase-queries-template.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/job_result.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/job_result.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/job_result.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/job_result.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/proxy_event_hits_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/proxy_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/proxy_event_hits_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/proxy_event_hits_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/recommendation_app_cip.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/recommendation_app_cip.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/recommendation_app_cip.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/recommendation_app_cip.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/relation_account_framedip.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/relation_account_framedip.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/relation_account_framedip.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/relation_account_framedip.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/report_result.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/report_result.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/report_result.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/report_result.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/security_event.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/security_event.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/security_event.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/security_event.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/security_event_hits_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/security_event_hits_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/security_event_hits_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/security_event_hits_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/session_record.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/session_record.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/session_record.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/session_record.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/sys_storage_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/sys_storage_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/sys_storage_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/sys_storage_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_client_ip_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_client_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_client_ip_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_client_ip_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_external_host_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_external_host_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_external_host_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_external_host_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_internal_host_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_internal_host_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_internal_host_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_internal_host_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_server_ip_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_server_ip_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_server_ip_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_server_ip_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_urls_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_urls_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_urls_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_urls_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_user_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_user_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_user_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_user_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_website_domain_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_website_domain_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/top_website_domain_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/top_website_domain_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_app_stat_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_app_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_app_stat_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_app_stat_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_metrics_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_metrics_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_metrics_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_protocol_stat_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_protocol_stat_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_protocol_stat_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_protocol_stat_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_summary_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_summary_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_summary_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_summary_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_top_destination_ip_metrics_log.json b/tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_top_destination_ip_metrics_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.04/qgw/config/traffic_top_destination_ip_metrics_log.json rename to tsg_olap/upgrade/2022/TSG-22.04/qgw/config/traffic_top_destination_ip_metrics_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/Galaxy_22.05更新文档.docx b/tsg_olap/upgrade/2022/TSG-22.05/Galaxy_22.05更新文档.docx similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/Galaxy_22.05更新文档.docx rename to tsg_olap/upgrade/2022/TSG-22.05/Galaxy_22.05更新文档.docx diff --git a/TSG发布版本更新记录/2022/TSG-22.05/clickhouse/update-05-ck.sql b/tsg_olap/upgrade/2022/TSG-22.05/clickhouse/update-05-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/clickhouse/update-05-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.05/clickhouse/update-05-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.05/job/mmdb-perl-built-in.pl b/tsg_olap/upgrade/2022/TSG-22.05/job/mmdb-perl-built-in.pl similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/job/mmdb-perl-built-in.pl rename to tsg_olap/upgrade/2022/TSG-22.05/job/mmdb-perl-built-in.pl diff --git a/TSG发布版本更新记录/2022/TSG-22.05/job/mmdb-perl-user-defined.pl b/tsg_olap/upgrade/2022/TSG-22.05/job/mmdb-perl-user-defined.pl similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/job/mmdb-perl-user-defined.pl rename to tsg_olap/upgrade/2022/TSG-22.05/job/mmdb-perl-user-defined.pl diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/active_defence_event.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/active_defence_event.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/active_defence_event.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/active_defence_event.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/assessment_event.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/assessment_event.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/assessment_event.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/assessment_event.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/dos_event.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/dos_event.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/dos_event.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/dos_event.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/es-filter.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/es-filter.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/es-filter.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/es-filter.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/es-queries-template.sql b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/es-queries-template.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/es-queries-template.sql rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/es-queries-template.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/gtpc_record.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/gtpc_record.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/gtpc_record.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/gtpc_record.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/interim_session_record.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/interim_session_record.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/interim_session_record.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/interim_session_record.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/proxy_event.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/proxy_event.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/proxy_event.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/proxy_event.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/public_schema_info.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/public_schema_info.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/public_schema_info.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/public_schema_info.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/radius_onff_log.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/radius_onff_log.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/radius_onff_log.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/radius_onff_log.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/radius_record.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/radius_record.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/radius_record.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/radius_record.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/security_event.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/security_event.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/security_event.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/security_event.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record_common_client_ip.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record_common_client_ip.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record_common_client_ip.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record_common_client_ip.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record_common_server_ip.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record_common_server_ip.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record_common_server_ip.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record_common_server_ip.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record_http_domain.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record_http_domain.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/session_record_http_domain.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/session_record_http_domain.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/sys_packet_capture_event.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/sys_packet_capture_event.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/sys_packet_capture_event.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/sys_packet_capture_event.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/transaction_record.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/transaction_record.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/transaction_record.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/transaction_record.json diff --git a/TSG发布版本更新记录/2022/TSG-22.05/qgw/config/voip_record.json b/tsg_olap/upgrade/2022/TSG-22.05/qgw/config/voip_record.json similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.05/qgw/config/voip_record.json rename to tsg_olap/upgrade/2022/TSG-22.05/qgw/config/voip_record.json diff --git a/TSG发布版本更新记录/2022/TSG-22.06/clickhouse/update-06-ck.sql b/tsg_olap/upgrade/2022/TSG-22.06/clickhouse/update-06-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.06/clickhouse/update-06-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.06/clickhouse/update-06-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.08/Galaxy_22.08更新文档.docx b/tsg_olap/upgrade/2022/TSG-22.08/Galaxy_22.08更新文档.docx similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.08/Galaxy_22.08更新文档.docx rename to tsg_olap/upgrade/2022/TSG-22.08/Galaxy_22.08更新文档.docx diff --git a/TSG发布版本更新记录/2022/TSG-22.08/hbase/upgrade_alter_hbase_2208.sh b/tsg_olap/upgrade/2022/TSG-22.08/hbase/upgrade_alter_hbase_2208.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.08/hbase/upgrade_alter_hbase_2208.sh rename to tsg_olap/upgrade/2022/TSG-22.08/hbase/upgrade_alter_hbase_2208.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.08/hbase/upgrade_phoenix_2208.sh b/tsg_olap/upgrade/2022/TSG-22.08/hbase/upgrade_phoenix_2208.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.08/hbase/upgrade_phoenix_2208.sh rename to tsg_olap/upgrade/2022/TSG-22.08/hbase/upgrade_phoenix_2208.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.08/hbase/upgrade_table_hbase_2208.sh b/tsg_olap/upgrade/2022/TSG-22.08/hbase/upgrade_table_hbase_2208.sh similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.08/hbase/upgrade_table_hbase_2208.sh rename to tsg_olap/upgrade/2022/TSG-22.08/hbase/upgrade_table_hbase_2208.sh diff --git a/TSG发布版本更新记录/2022/TSG-22.09/clickhouse/update-09-ck.sql b/tsg_olap/upgrade/2022/TSG-22.09/clickhouse/update-09-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.09/clickhouse/update-09-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.09/clickhouse/update-09-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.10/clickhouse/update-22.10-ck.sql b/tsg_olap/upgrade/2022/TSG-22.10/clickhouse/update-22.10-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.10/clickhouse/update-22.10-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.10/clickhouse/update-22.10-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.10/hbase/update.txt b/tsg_olap/upgrade/2022/TSG-22.10/hbase/update.txt similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.10/hbase/update.txt rename to tsg_olap/upgrade/2022/TSG-22.10/hbase/update.txt diff --git a/TSG发布版本更新记录/2022/TSG-22.10/phoenix/update.sql b/tsg_olap/upgrade/2022/TSG-22.10/phoenix/update.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.10/phoenix/update.sql rename to tsg_olap/upgrade/2022/TSG-22.10/phoenix/update.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.11/clickhouse/update-22.11-ck.sql b/tsg_olap/upgrade/2022/TSG-22.11/clickhouse/update-22.11-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.11/clickhouse/update-22.11-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.11/clickhouse/update-22.11-ck.sql diff --git a/TSG发布版本更新记录/2022/TSG-22.12/clickhouse/update-22.12-ck.sql b/tsg_olap/upgrade/2022/TSG-22.12/clickhouse/update-22.12-ck.sql similarity index 100% rename from TSG发布版本更新记录/2022/TSG-22.12/clickhouse/update-22.12-ck.sql rename to tsg_olap/upgrade/2022/TSG-22.12/clickhouse/update-22.12-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.01/clickhouse/update-23.01-ck.sql b/tsg_olap/upgrade/2023/TSG-23.01/clickhouse/update-23.01-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.01/clickhouse/update-23.01-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.01/clickhouse/update-23.01-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.02/clickhouse/drop-tmp-23.02-ck.sql b/tsg_olap/upgrade/2023/TSG-23.02/clickhouse/drop-tmp-23.02-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.02/clickhouse/drop-tmp-23.02-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.02/clickhouse/drop-tmp-23.02-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.02/clickhouse/rename-old-23.02-ck.sql b/tsg_olap/upgrade/2023/TSG-23.02/clickhouse/rename-old-23.02-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.02/clickhouse/rename-old-23.02-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.02/clickhouse/rename-old-23.02-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.02/clickhouse/rename-tmp-23.02-ck.sql b/tsg_olap/upgrade/2023/TSG-23.02/clickhouse/rename-tmp-23.02-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.02/clickhouse/rename-tmp-23.02-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.02/clickhouse/rename-tmp-23.02-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.02/clickhouse/update-23.02-ck.sql b/tsg_olap/upgrade/2023/TSG-23.02/clickhouse/update-23.02-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.02/clickhouse/update-23.02-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.02/clickhouse/update-23.02-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.02/hbase/hbase-site.xml b/tsg_olap/upgrade/2023/TSG-23.02/hbase/hbase-site.xml similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.02/hbase/hbase-site.xml rename to tsg_olap/upgrade/2023/TSG-23.02/hbase/hbase-site.xml diff --git a/TSG发布版本更新记录/2023/TSG-23.02/hbase/update-2302-hbase.sql b/tsg_olap/upgrade/2023/TSG-23.02/hbase/update-2302-hbase.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.02/hbase/update-2302-hbase.sql rename to tsg_olap/upgrade/2023/TSG-23.02/hbase/update-2302-hbase.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.02/phoenix/update-2302-phoenix.sql b/tsg_olap/upgrade/2023/TSG-23.02/phoenix/update-2302-phoenix.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.02/phoenix/update-2302-phoenix.sql rename to tsg_olap/upgrade/2023/TSG-23.02/phoenix/update-2302-phoenix.sql diff --git a/TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/.gitkeep b/tsg_olap/upgrade/2023/TSG-23.03/clickhouse/.gitkeep similarity index 100% rename from TSG发布版本更新记录/2021/TSG-21.09/Galaxy-qgw-service/.gitkeep rename to tsg_olap/upgrade/2023/TSG-23.03/clickhouse/.gitkeep diff --git a/TSG发布版本更新记录/2023/TSG-23.03/clickhouse/update-23.03-ck.sql b/tsg_olap/upgrade/2023/TSG-23.03/clickhouse/update-23.03-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.03/clickhouse/update-23.03-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.03/clickhouse/update-23.03-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.04/clickhouse/update-23.04-ck.sql b/tsg_olap/upgrade/2023/TSG-23.04/clickhouse/update-23.04-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.04/clickhouse/update-23.04-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.04/clickhouse/update-23.04-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.05/clickhouse/update-23.05-ck.sql b/tsg_olap/upgrade/2023/TSG-23.05/clickhouse/update-23.05-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.05/clickhouse/update-23.05-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.05/clickhouse/update-23.05-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.06/clickhouse/update-23.06-ck.sql b/tsg_olap/upgrade/2023/TSG-23.06/clickhouse/update-23.06-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.06/clickhouse/update-23.06-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.06/clickhouse/update-23.06-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.06/hbase/update.txt b/tsg_olap/upgrade/2023/TSG-23.06/hbase/update.txt similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.06/hbase/update.txt rename to tsg_olap/upgrade/2023/TSG-23.06/hbase/update.txt diff --git a/TSG发布版本更新记录/2023/TSG-23.07/clickhouse/update-23.07-ck.sql b/tsg_olap/upgrade/2023/TSG-23.07/clickhouse/update-23.07-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.07/clickhouse/update-23.07-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.07/clickhouse/update-23.07-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.08/clickhouse/update-23.08-ck.sql b/tsg_olap/upgrade/2023/TSG-23.08/clickhouse/update-23.08-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.08/clickhouse/update-23.08-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.08/clickhouse/update-23.08-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.09/clickhouse/update-23.09-ck.sql b/tsg_olap/upgrade/2023/TSG-23.09/clickhouse/update-23.09-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.09/clickhouse/update-23.09-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.09/clickhouse/update-23.09-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.10/clickhouse/update-23.10-ck.sql b/tsg_olap/upgrade/2023/TSG-23.10/clickhouse/update-23.10-ck.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.10/clickhouse/update-23.10-ck.sql rename to tsg_olap/upgrade/2023/TSG-23.10/clickhouse/update-23.10-ck.sql diff --git a/TSG发布版本更新记录/2023/TSG-23.11/hbase/hbase-site.xml b/tsg_olap/upgrade/2023/TSG-23.11/hbase/hbase-site.xml similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.11/hbase/hbase-site.xml rename to tsg_olap/upgrade/2023/TSG-23.11/hbase/hbase-site.xml diff --git a/TSG发布版本更新记录/2023/TSG-23.11/hos/galaxy-hos-service.yml b/tsg_olap/upgrade/2023/TSG-23.11/hos/galaxy-hos-service.yml similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.11/hos/galaxy-hos-service.yml rename to tsg_olap/upgrade/2023/TSG-23.11/hos/galaxy-hos-service.yml diff --git a/TSG发布版本更新记录/2023/TSG-23.12/hbase/hbase-site.xml b/tsg_olap/upgrade/2023/TSG-23.12/hbase/hbase-site.xml similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.12/hbase/hbase-site.xml rename to tsg_olap/upgrade/2023/TSG-23.12/hbase/hbase-site.xml diff --git a/TSG发布版本更新记录/2023/TSG-23.12/hbase/update-hbase-23.12.txt b/tsg_olap/upgrade/2023/TSG-23.12/hbase/update-hbase-23.12.txt similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.12/hbase/update-hbase-23.12.txt rename to tsg_olap/upgrade/2023/TSG-23.12/hbase/update-hbase-23.12.txt diff --git a/TSG发布版本更新记录/2023/TSG-23.12/hos/galaxy-hos-service.yml b/tsg_olap/upgrade/2023/TSG-23.12/hos/galaxy-hos-service.yml similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.12/hos/galaxy-hos-service.yml rename to tsg_olap/upgrade/2023/TSG-23.12/hos/galaxy-hos-service.yml diff --git a/TSG发布版本更新记录/2023/TSG-23.12/phoenix/update-phoenix-23.12.sql b/tsg_olap/upgrade/2023/TSG-23.12/phoenix/update-phoenix-23.12.sql similarity index 100% rename from TSG发布版本更新记录/2023/TSG-23.12/phoenix/update-phoenix-23.12.sql rename to tsg_olap/upgrade/2023/TSG-23.12/phoenix/update-phoenix-23.12.sql diff --git a/TSG发布版本更新记录/TSG-24.01/hbase/update-hbase-24.01.txt b/tsg_olap/upgrade/TSG-24.01/hbase/update-hbase-24.01.txt similarity index 100% rename from TSG发布版本更新记录/TSG-24.01/hbase/update-hbase-24.01.txt rename to tsg_olap/upgrade/TSG-24.01/hbase/update-hbase-24.01.txt diff --git a/TSG发布版本更新记录/TSG-24.01/hos/galaxy-hos-service.yml b/tsg_olap/upgrade/TSG-24.01/hos/galaxy-hos-service.yml similarity index 100% rename from TSG发布版本更新记录/TSG-24.01/hos/galaxy-hos-service.yml rename to tsg_olap/upgrade/TSG-24.01/hos/galaxy-hos-service.yml diff --git a/TSG发布版本更新记录/TSG-24.01/phoenix/update-phoenix-24.01.sql b/tsg_olap/upgrade/TSG-24.01/phoenix/update-phoenix-24.01.sql similarity index 100% rename from TSG发布版本更新记录/TSG-24.01/phoenix/update-phoenix-24.01.sql rename to tsg_olap/upgrade/TSG-24.01/phoenix/update-phoenix-24.01.sql diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/README.md b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/README.md similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/README.md rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/README.md diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/etl_session_record_kafka_to_kafka b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/etl_session_record_kafka_to_kafka similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/etl_session_record_kafka_to_kafka rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/etl_session_record_kafka_to_kafka diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/grootstream.yaml b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/grootstream.yaml similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/grootstream.yaml rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/grootstream.yaml diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/session_record_processed_kafka_to_clickhouse b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/session_record_processed_kafka_to_clickhouse similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/session_record_processed_kafka_to_clickhouse rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/session_record_processed_kafka_to_clickhouse diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/udf.plugins b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/udf.plugins similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/udf.plugins rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/udf.plugins diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/dos_event_kafka_to_clickhouse b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/dos_event_kafka_to_clickhouse similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/dos_event_kafka_to_clickhouse rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/dos_event_kafka_to_clickhouse diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_proxy_event_kafka_to_clickhouse b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_proxy_event_kafka_to_clickhouse similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_proxy_event_kafka_to_clickhouse rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_proxy_event_kafka_to_clickhouse diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_session_record_kafka_to_clickhouse b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_session_record_kafka_to_clickhouse similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_session_record_kafka_to_clickhouse rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_session_record_kafka_to_clickhouse diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_transaction_record_kafka_to_clickhouse b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_transaction_record_kafka_to_clickhouse similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_transaction_record_kafka_to_clickhouse rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_transaction_record_kafka_to_clickhouse diff --git a/TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_voip_record_kafka_to_clickhouse b/tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_voip_record_kafka_to_clickhouse similarity index 100% rename from TSG发布版本更新记录/TSG-24.02.1/Groot-Stream/集中式/etl_voip_record_kafka_to_clickhouse rename to tsg_olap/upgrade/TSG-24.02.1/Groot-Stream/集中式/etl_voip_record_kafka_to_clickhouse diff --git a/TSG发布版本更新记录/TSG-24.02/clickhouse/Clickhouse_TSG_建表语句.sql b/tsg_olap/upgrade/TSG-24.02/clickhouse/Clickhouse_TSG_建表语句.sql similarity index 100% rename from TSG发布版本更新记录/TSG-24.02/clickhouse/Clickhouse_TSG_建表语句.sql rename to tsg_olap/upgrade/TSG-24.02/clickhouse/Clickhouse_TSG_建表语句.sql diff --git a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/03_check.sql b/tsg_olap/upgrade/TSG-24.02/clickhouse/check-24.02.sql similarity index 99% rename from Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/03_check.sql rename to tsg_olap/upgrade/TSG-24.02/clickhouse/check-24.02.sql index 3703ad2..73fbce1 100644 --- a/Clickhouse最新全量建表语句/TSG 2307版本到2402版本升级操作/03_check.sql +++ b/tsg_olap/upgrade/TSG-24.02/clickhouse/check-24.02.sql @@ -1,20 +1,20 @@ -SELECT log_id, recv_time, vsys_id, assessment_date, lot_number, file_name, assessment_file, assessment_type, features, `size`, file_checksum_sha -FROM tsg_galaxy_v3.assessment_event where recv_time >= toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time = toUnixTimestamp('2030-01-01 00:00:00') AND recv_time