update 24.01

This commit is contained in:
doufenghu
2023-12-29 15:38:42 +08:00
parent 99a303b940
commit 1af636caf7

View File

@@ -6885,7 +6885,7 @@
"header": [],
"body": {
"mode": "raw",
"raw": "{\n \"statement\": \"select item, sum(count) as count,sum(bytes) from ( select arrayJoin(items) as item, count, bytes from ( select security_rule_list as items, count(*) as count,sum(sent_bytes+received_bytes) as bytes from session_record as sr where recv_time >= UNIX_TIMESTAMP('{{start_time}}') and recv_time <UNIX_TIMESTAMP('{{end_time}}') and notEmpty(security_rule_list) group by security_rule_list )) group by item order by count desc limit 20\",\n \"exec_mode\": \"oneshot\"\n}",
"raw": "{\n \"statement\": \"select item, sum(count) as count,sum(bytes) from ( select arrayJoin(items) as item, count, bytes from ( select monitor_rule_list as items, count(*) as count,sum(sent_bytes+received_bytes) as bytes from session_record as sr where recv_time >= UNIX_TIMESTAMP('{{start_time}}') and recv_time <UNIX_TIMESTAMP('{{end_time}}') and notEmpty(monitor_rule_list) group by monitor_rule_list )) group by item order by count desc limit 20\",\n \"exec_mode\": \"oneshot\"\n}",
"options": {
"raw": {
"language": "json"
@@ -6928,7 +6928,7 @@
"header": [],
"body": {
"mode": "raw",
"raw": "{\n \"statement\": \"select arrayJoin(security_rule_list) as item, count(*) as count,sum(sent_bytes+received_bytes) as bytes from session_record as sr where recv_time >= UNIX_TIMESTAMP('{{start_time}}') and recv_time <UNIX_TIMESTAMP('{{end_time}}') and notEmpty(security_rule_list) and has(security_rule_list,402159) group by arrayJoin(security_rule_list) order by count desc limit 20\",\n \"exec_mode\": \"oneshot\"\n}",
"raw": "{\n \"statement\": \"select arrayJoin(monitor_rule_list) as item, count(*) as count,sum(sent_bytes+received_bytes) as bytes from session_record as sr where recv_time >= UNIX_TIMESTAMP('{{start_time}}') and recv_time <UNIX_TIMESTAMP('{{end_time}}') and notEmpty(monitor_rule_list) group by arrayJoin(monitor_rule_list) order by count desc limit 20\",\n \"exec_mode\": \"oneshot\"\n}",
"options": {
"raw": {
"language": "json"
@@ -8392,6 +8392,94 @@
"description": "平均速率的两种计算方式。例如计算5分钟的平均速率\n\n- sum(bytes)/5分钟若5分钟内仅有30秒产生流量产生结果将不准确\n- sum(bytes)/活跃时间 其中活跃时间=count(distinct(统计时间))\\* 预聚合粒度\n - 统计时间time_floor(时间字段,'PT15S')\n - 预聚合粒度: 存储到时序数据库的统计粒度"
},
"response": []
},
{
"name": "Top 100 slowest domains",
"event": [
{
"listen": "test",
"script": {
"exec": [
"pm.test(\"Status code is 200\", function () {",
" pm.response.to.have.status(200);",
"});"
],
"type": "text/javascript"
}
}
],
"request": {
"method": "POST",
"header": [],
"body": {
"mode": "raw",
"raw": "{\n \"statement\": \"select server_domain as domain, round(avg(tcp_rtt_ms),0) avg_rtt_latency_ms from session_record where recv_time >= UNIX_TIMESTAMP('{{start_time}}') and recv_time <UNIX_TIMESTAMP('{{end_time}}') and notEmpty(server_domain) group by server_domain order by avg_rtt_latency_ms desc limit 100\",\n \"exec_mode\": \"oneshot\"\n}",
"options": {
"raw": {
"language": "json"
}
}
},
"url": {
"raw": "http://{{qgw_ip}}:{{qgw_port}}/v1/query/sql",
"protocol": "http",
"host": [
"{{qgw_ip}}"
],
"port": "{{qgw_port}}",
"path": [
"v1",
"query",
"sql"
]
},
"description": "平均速率的两种计算方式。例如计算5分钟的平均速率\n\n- sum(bytes)/5分钟若5分钟内仅有30秒产生流量产生结果将不准确\n- sum(bytes)/活跃时间 其中活跃时间=count(distinct(统计时间))\\* 预聚合粒度\n - 统计时间time_floor(时间字段,'PT15S')\n - 预聚合粒度: 存储到时序数据库的统计粒度"
},
"response": []
},
{
"name": "Duplicate logs Assessment",
"event": [
{
"listen": "test",
"script": {
"exec": [
"pm.test(\"Status code is 200\", function () {",
" pm.response.to.have.status(200);",
"});"
],
"type": "text/javascript"
}
}
],
"request": {
"method": "POST",
"header": [],
"body": {
"mode": "raw",
"raw": "{\n \"statement\": \"select 'Session Records' as type, count(*) as num from (select log_id,count(*) as num from session_record where recv_time >= UNIX_TIMESTAMP('{{start_time}}') and recv_time <UNIX_TIMESTAMP('{{end_time}}') group by log_id having num >1) union all select 'Proxy Events' as type, count(*) as num from (select log_id,count(*) as num from proxy_event where recv_time >= UNIX_TIMESTAMP('{{start_time}}') and recv_time <UNIX_TIMESTAMP('{{end_time}}') group by log_id having num >1)\",\n \"exec_mode\": \"oneshot\"\n}",
"options": {
"raw": {
"language": "json"
}
}
},
"url": {
"raw": "http://{{qgw_ip}}:{{qgw_port}}/v1/query/sql",
"protocol": "http",
"host": [
"{{qgw_ip}}"
],
"port": "{{qgw_port}}",
"path": [
"v1",
"query",
"sql"
]
},
"description": "平均速率的两种计算方式。例如计算5分钟的平均速率\n\n- sum(bytes)/5分钟若5分钟内仅有30秒产生流量产生结果将不准确\n- sum(bytes)/活跃时间 其中活跃时间=count(distinct(统计时间))\\* 预聚合粒度\n - 统计时间time_floor(时间字段,'PT15S')\n - 预聚合粒度: 存储到时序数据库的统计粒度"
},
"response": []
}
]
},
@@ -11721,6 +11809,50 @@
"response": []
}
]
},
{
"name": "Knowledge Base File",
"item": [
{
"name": "Get List",
"event": [
{
"listen": "test",
"script": {
"exec": [
"pm.test(\"Status code is 200\", function () {",
" pm.response.to.have.status(200);",
"});"
],
"type": "text/javascript"
}
}
],
"request": {
"method": "GET",
"header": [
{
"key": "Content-Type",
"value": "application/x-www-form-urlencoded",
"type": "text"
}
],
"url": {
"raw": "http://{{qgw_ip}}:{{qgw_port}}/v1/knowledge_base",
"protocol": "http",
"host": [
"{{qgw_ip}}"
],
"port": "{{qgw_port}}",
"path": [
"v1",
"knowledge_base"
]
}
},
"response": []
}
]
}
],
"event": [