diff --git a/CN发布版本更新记录/CN-23.12/clickhouse/update-23.12-ck.sql b/CN发布版本更新记录/CN-23.12/clickhouse/update-23.12-ck.sql
new file mode 100644
index 0000000..6fa7aff
--- /dev/null
+++ b/CN发布版本更新记录/CN-23.12/clickhouse/update-23.12-ck.sql
@@ -0,0 +1,753 @@
+set distributed_ddl_task_timeout = 180;
+
+ALTER table cyber_narrator_galaxy.metric_ip_local on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_ip on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_ip on cluster ck_query
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+
+ALTER table cyber_narrator_galaxy.metric_region_local on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_region on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_region on cluster ck_query
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+
+ALTER table cyber_narrator_galaxy.metric_asn_local on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_asn on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_asn on cluster ck_query
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+
+ALTER table cyber_narrator_galaxy.metric_domain_local on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_domain on cluster ck_cluster
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_domain on cluster ck_query
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+
+ALTER table cyber_narrator_galaxy.metric_link_local on cluster ck_cluster
+rename column IF EXISTS common_out_link_id TO out_link_id,
+rename column IF EXISTS common_in_link_id TO in_link_id,
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_link on cluster ck_cluster
+rename column IF EXISTS common_out_link_id TO out_link_id,
+rename column IF EXISTS common_in_link_id TO in_link_id,
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+ALTER table cyber_narrator_galaxy.metric_link on cluster ck_query
+rename column IF EXISTS common_out_link_id TO out_link_id,
+rename column IF EXISTS common_in_link_id TO in_link_id,
+rename column IF EXISTS common_c2s_pkt_num TO sent_pkts,
+rename column IF EXISTS common_c2s_byte_num TO sent_bytes,
+rename column IF EXISTS common_s2c_pkt_num TO received_pkts,
+rename column IF EXISTS common_s2c_byte_num TO received_bytes,
+rename column IF EXISTS common_sessions TO sessions,
+rename column IF EXISTS c2s_tcp_lostlen_ratio TO tcp_c2s_lost_bytes_ratio,
+rename column IF EXISTS s2c_tcp_lostlen_ratio TO tcp_s2c_lost_bytes_ratio,
+rename column IF EXISTS tcp_lostlen_ratio TO tcp_lost_bytes_ratio,
+rename column IF EXISTS c2s_tcp_unorder_num_ratio TO tcp_c2s_o3_pkts_ratio,
+rename column IF EXISTS s2c_tcp_unorder_num_ratio TO tcp_s2c_o3_pkts_ratio,
+rename column IF EXISTS tcp_unorder_num_ratio TO tcp_o3_pkts_ratio,
+rename column IF EXISTS c2s_byte_retrans_ratio TO tcp_c2s_rtx_bytes_ratio,
+rename column IF EXISTS s2c_byte_retrans_ratio TO tcp_s2c_rtx_bytes_ratio,
+rename column IF EXISTS byte_retrans_ratio TO tcp_rtx_bytes_ratio,
+rename column IF EXISTS c2s_pkt_retrans_ratio TO tcp_c2s_rtx_pkts_ratio,
+rename column IF EXISTS s2c_pkt_retrans_ratio TO tcp_s2c_rtx_pkts_ratio,
+rename column IF EXISTS pkt_retrans_ratio TO tcp_rtx_pkts_ratio,
+rename column IF EXISTS avg_establish_latency_ms TO avg_tcp_rtt_ms,
+rename column IF EXISTS avg_ssl_con_latency_ms TO avg_ssl_handshake_latency_ms;
+
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application_local ON CLUSTER ck_cluster (
+ app String,
+ app_category String,
+ app_subcategory String,
+ app_company String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,app,app_category,app_subcategory,app_company) SETTINGS index_granularity = 8192;
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_cluster (
+ app String,
+ app_category String,
+ app_subcategory String,
+ app_company String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand());
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_query (
+ app String,
+ app_category String,
+ app_subcategory String,
+ app_company String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand());
+
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol_local ON CLUSTER ck_cluster (
+ l7_protocol String,
+ server_port Int64,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,l7_protocol,server_port) SETTINGS index_granularity = 8192;
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_cluster (
+ l7_protocol String,
+ server_port Int64,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand());
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_query (
+ l7_protocol String,
+ server_port Int64,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand());
+
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_local ON CLUSTER ck_cluster (
+ subscriber_id String,
+ imei String,
+ imsi String,
+ phone_number String,
+ apn String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id) SETTINGS index_granularity = 8192;
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber ON CLUSTER ck_cluster (
+ subscriber_id String,
+ imei String,
+ imsi String,
+ phone_number String,
+ apn String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_local', rand());
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber ON CLUSTER ck_query (
+ subscriber_id String,
+ imei String,
+ imsi String,
+ phone_number String,
+ apn String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_local', rand());
+
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app_local ON CLUSTER ck_cluster (
+ subscriber_id String,
+ app String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id) SETTINGS index_granularity = 8192;
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_cluster (
+ subscriber_id String,
+ app String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand());
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_query (
+ subscriber_id String,
+ app String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand());
diff --git a/Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql b/Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql
index 324a905..5c93f40 100644
--- a/Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql
+++ b/Clickhouse最新全量建表语句/Clickhouse_CN_建表语句.sql
@@ -333,11 +333,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip_local ON CLUSTER ck_c
  side String,
  zone String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -346,21 +346,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip_local ON CLUSTER ck_c
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64),
  asymmetric_sessions Int64,
  bulky_sessions Int64,
  cbr_streaming_sessions Int64,
@@ -378,11 +378,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_cluster
  side String,
  zone String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -391,21 +391,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_cluster
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64),
  asymmetric_sessions Int64,
  bulky_sessions Int64,
  cbr_streaming_sessions Int64,
@@ -423,11 +423,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_query (
  side String,
  zone String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -436,21 +436,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_query (
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64),
  asymmetric_sessions Int64,
  bulky_sessions Int64,
  cbr_streaming_sessions Int64,
@@ -464,16 +464,17 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_ip ON CLUSTER ck_query (
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_ip_local', rand());
 
 
-CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn_local ON CLUSTER ck_cluster (
- asn String,
- isp String,
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region_local ON CLUSTER ck_cluster (
+ country_region String,
+ super_admin_area String,
+ admin_area String,
  side String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -482,21 +483,129 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn_local ON CLUSTER ck_
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,country_region,super_admin_area,admin_area) SETTINGS index_granularity = 8192;
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_cluster (
+ country_region String,
+ super_admin_area String,
+ admin_area String,
+ side String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand());
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_query (
+ country_region String,
+ super_admin_area String,
+ admin_area String,
+ side String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand());
+
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn_local ON CLUSTER ck_cluster (
+ asn String,
+ isp String,
+ side String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
 ) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,asn,isp) SETTINGS index_granularity = 8192;
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_cluster (
@@ -504,11 +613,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_cluste
  isp String,
  side String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -517,21 +626,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_cluste
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_asn_local', rand());
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_query (
@@ -539,11 +648,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_query
  isp String,
  side String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -552,35 +661,35 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_asn ON CLUSTER ck_query
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_asn_local', rand());
 
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application_local ON CLUSTER ck_cluster (
- common_app_label String,
+ app String,
  app_category String,
  app_subcategory String,
  app_company String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -589,34 +698,34 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application_local ON CLU
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
-) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,common_app_label,app_category,app_subcategory,app_company) SETTINGS index_granularity = 8192;
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,app,app_category,app_subcategory,app_company) SETTINGS index_granularity = 8192;
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_cluster (
- common_app_label String,
+ app String,
  app_category String,
  app_subcategory String,
  app_company String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -625,34 +734,35 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER c
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand());
 
+
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER ck_query (
- common_app_label String,
+ app String,
  app_category String,
  app_subcategory String,
  app_company String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -661,21 +771,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_application ON CLUSTER c
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_application_local', rand());
 
 
@@ -685,11 +795,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain_local ON CLUSTER
  domain_category_name String,
  domain_category_group String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -698,21 +808,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain_local ON CLUSTER
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,domain,domain_category_name,domain_category_group) SETTINGS index_granularity = 8192;
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_cluster (
@@ -721,11 +831,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_clu
  domain_category_name String,
  domain_category_group String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -734,21 +844,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_clu
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_domain_local', rand());
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_query (
@@ -757,11 +867,11 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_que
  domain_category_name String,
  domain_category_group String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -770,33 +880,33 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_domain ON CLUSTER ck_que
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_domain_local', rand());
 
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol_local ON CLUSTER ck_cluster (
- common_l7_protocol  String,
- common_server_port Int64,
+ l7_protocol String,
+ server_port Int64,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -805,32 +915,32 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol_local ON CLUSTE
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
-) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,common_l7_protocol,common_server_port) SETTINGS index_granularity = 8192;
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,l7_protocol,server_port) SETTINGS index_granularity = 8192;
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_cluster (
- common_l7_protocol  String,
- common_server_port Int64,
+ l7_protocol String,
+ server_port Int64,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -839,32 +949,32 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_c
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand());
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_query (
- common_l7_protocol  String,
- common_server_port Int64,
+ l7_protocol String,
+ server_port Int64,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -873,21 +983,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_protocol ON CLUSTER ck_q
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_protocol_local', rand());
 
 
@@ -900,16 +1010,16 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link_local ON CLUSTER ck
  server_super_admin_area String,
  server_admin_area String,
  server_zone String,
- common_out_link_id Int64,
- common_in_link_id Int64,
+ out_link_id Int64,
+ in_link_id Int64,
  out_link_direction String,
  in_link_direction String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -918,21 +1028,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link_local ON CLUSTER ck
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time) SETTINGS index_granularity = 8192;
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_cluster (
@@ -944,16 +1054,16 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_clust
  server_super_admin_area String,
  server_admin_area String,
  server_zone String,
- common_out_link_id Int64,
- common_in_link_id Int64,
+ out_link_id Int64,
+ in_link_id Int64,
  out_link_direction String,
  in_link_direction String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -962,21 +1072,21 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_clust
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_link_local', rand());
 
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_query (
@@ -988,16 +1098,16 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_query
  server_super_admin_area String,
  server_admin_area String,
  server_zone String,
- common_out_link_id Int64,
- common_in_link_id Int64,
+ out_link_id Int64,
+ in_link_id Int64,
  out_link_direction String,
  in_link_direction String,
  stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
  traffic_inbound_byte Int64,
  traffic_inbound_pkt Int64,
  traffic_outbound_byte Int64,
@@ -1006,24 +1116,239 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_link ON CLUSTER ck_query
  traffic_internal_pkt Int64,
  traffic_through_byte Int64,
  traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
  avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
+ avg_ssl_handshake_latency_ms Nullable(Float64)
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_link_local', rand());
 
 
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_local ON CLUSTER ck_cluster (
+ subscriber_id String,
+ imei String,
+ imsi String,
+ phone_number String,
+ apn String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id) SETTINGS index_granularity = 8192;
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber ON CLUSTER ck_cluster (
+ subscriber_id String,
+ imei String,
+ imsi String,
+ phone_number String,
+ apn String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_local', rand());
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber ON CLUSTER ck_query (
+ subscriber_id String,
+ imei String,
+ imsi String,
+ phone_number String,
+ apn String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_local', rand());
+
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app_local ON CLUSTER ck_cluster (
+ subscriber_id String,
+ app String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,subscriber_id) SETTINGS index_granularity = 8192;
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_cluster (
+ subscriber_id String,
+ app String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64)
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand());
+
+CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_subscriber_app ON CLUSTER ck_query (
+ subscriber_id String,
+ app String,
+ stat_time Int64,
+ sent_pkts Int64,
+ sent_bytes Int64,
+ received_pkts Int64,
+ received_bytes Int64,
+ sessions Int64,
+ traffic_inbound_byte Int64,
+ traffic_inbound_pkt Int64,
+ traffic_outbound_byte Int64,
+ traffic_outbound_pkt Int64,
+ traffic_internal_byte Int64,
+ traffic_internal_pkt Int64,
+ traffic_through_byte Int64,
+ traffic_through_pkt Int64,
+ tcp_c2s_lost_bytes_ratio Nullable(Float64),
+ tcp_s2c_lost_bytes_ratio Nullable(Float64),
+ tcp_lost_bytes_ratio Nullable(Float64),
+ tcp_c2s_o3_pkts_ratio Nullable(Float64),
+ tcp_s2c_o3_pkts_ratio Nullable(Float64),
+ tcp_o3_pkts_ratio Nullable(Float64),
+ tcp_c2s_rtx_bytes_ratio Nullable(Float64),
+ tcp_s2c_rtx_bytes_ratio Nullable(Float64),
+ tcp_rtx_bytes_ratio Nullable(Float64),
+ tcp_c2s_rtx_pkts_ratio Nullable(Float64),
+ tcp_s2c_rtx_pkts_ratio Nullable(Float64),
+ tcp_rtx_pkts_ratio Nullable(Float64),
+ avg_tcp_rtt_ms Nullable(Float64),
+ avg_http_response_latency_ms Nullable(Float64),
+ avg_ssl_handshake_latency_ms Nullable(Float64) 
+) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_subscriber_app_local', rand());
+
+
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_server_ip_local ON CLUSTER ck_cluster (
  server_ip String,
  server_country_region String,
@@ -1283,115 +1608,6 @@ CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_dns_rr_cname ON CLUSTER
 ) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_dns_rr_cname_local', rand());
 
 
-CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region_local ON CLUSTER ck_cluster (
- country_region String,
- super_admin_area String,
- admin_area String,
- side String,
- stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
- traffic_inbound_byte Int64,
- traffic_inbound_pkt Int64,
- traffic_outbound_byte Int64,
- traffic_outbound_pkt Int64,
- traffic_internal_byte Int64,
- traffic_internal_pkt Int64,
- traffic_through_byte Int64,
- traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
- avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
-) ENGINE = MergeTree PARTITION BY toYYYYMMDD(toDate(stat_time)) ORDER BY (stat_time,country_region,super_admin_area,admin_area) SETTINGS index_granularity = 8192;
-
-CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_cluster (
- country_region String,
- super_admin_area String,
- admin_area String,
- side String,
- stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
- traffic_inbound_byte Int64,
- traffic_inbound_pkt Int64,
- traffic_outbound_byte Int64,
- traffic_outbound_pkt Int64,
- traffic_internal_byte Int64,
- traffic_internal_pkt Int64,
- traffic_through_byte Int64,
- traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
- avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
-) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand());
-
-CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_region ON CLUSTER ck_query (
- country_region String,
- super_admin_area String,
- admin_area String,
- side String,
- stat_time Int64,
- common_c2s_pkt_num Int64,
- common_c2s_byte_num Int64,
- common_s2c_pkt_num Int64,
- common_s2c_byte_num Int64,
- common_sessions Int64,
- traffic_inbound_byte Int64,
- traffic_inbound_pkt Int64,
- traffic_outbound_byte Int64,
- traffic_outbound_pkt Int64,
- traffic_internal_byte Int64,
- traffic_internal_pkt Int64,
- traffic_through_byte Int64,
- traffic_through_pkt Int64,
- c2s_tcp_lostlen_ratio Nullable(Float64),
- s2c_tcp_lostlen_ratio Nullable(Float64),
- tcp_lostlen_ratio Nullable(Float64),
- c2s_tcp_unorder_num_ratio Nullable(Float64),
- s2c_tcp_unorder_num_ratio Nullable(Float64),
- tcp_unorder_num_ratio Nullable(Float64),
- c2s_byte_retrans_ratio Nullable(Float64),
- s2c_byte_retrans_ratio Nullable(Float64),
- byte_retrans_ratio Nullable(Float64),
- c2s_pkt_retrans_ratio Nullable(Float64),
- s2c_pkt_retrans_ratio Nullable(Float64),
- pkt_retrans_ratio Nullable(Float64),
- avg_establish_latency_ms Nullable(Float64),
- avg_http_response_latency_ms Nullable(Float64),
- avg_ssl_con_latency_ms Nullable(Float64)
-) ENGINE = Distributed('ck_cluster', 'cyber_narrator_galaxy', 'metric_region_local', rand());
-
-
 CREATE TABLE IF NOT EXISTS cyber_narrator_galaxy.metric_relation_local ON CLUSTER ck_cluster (
  app_name String,
  domain String,