... | ... | @@ -83,15 +83,15 @@ INSERT INTO dns.queries (id, unixtime, time, qname, domainname, len, frag, ttl, |
|
|
edns_client_subnet_asn, edns_client_subnet_country, labels, res_len, time_micro, resp_frag, proc_time, is_google, is_opendns,
|
|
|
dns_res_len, server_location)
|
|
|
PARTITION (year, month, day, server)
|
|
|
SELECT
|
|
|
SELECT
|
|
|
id, -- Entrada: id INT
|
|
|
time, -- Entrada: unixtime BIGINT
|
|
|
time * 1000, -- Entrada: time BIGINT
|
|
|
cast(time as bigint), -- Entrada: unixtime BIGINT
|
|
|
cast((time * 1000) as bigint), -- Entrada: time BIGINT
|
|
|
lower(qname), -- Entrada: qname STRING
|
|
|
regexp_extract(lower(qname), "([^.]+\\.[^.]+)\\.\\z", 1); -- Entrada: domainname STRING
|
|
|
req_pkt_len, -- Entrada: len INT
|
|
|
regexp_extract(lower(qname), "([^.]+\\.[^.]+)\\.\\z", 1), -- Entrada: domainname STRING
|
|
|
req_net_len, -- Entrada: len INT
|
|
|
NULL, -- Entrada: frag INT
|
|
|
req_ttl, -- Entrada: ttl INT
|
|
|
net_ttl, -- Entrada: ttl INT
|
|
|
net_ipv, -- Entrada: ipv INT
|
|
|
net_proto, -- Entrada: prot INT
|
|
|
client_addr, -- Entrada: src STRING
|
... | ... | @@ -118,7 +118,7 @@ SELECT |
|
|
NULL, -- Entrada: country STRING
|
|
|
NULL, -- Entrada: asn STRING
|
|
|
req_edns_udp, -- Entrada: edns_udp INT
|
|
|
req_edns_ver, -- Entrada: edns_version SMALLINT
|
|
|
cast(req_edns_ver as SMALLINT), -- Entrada: edns_version SMALLINT
|
|
|
cast(req_edns_do as BOOLEAN), -- Entrada: edns_do BOOLEAN
|
|
|
cast(req_edns_ping as BOOLEAN), -- Entrada: edns_ping BOOLEAN
|
|
|
resp_edns_nsid, -- Entrada: edns_nsid STRING
|
... | ... | @@ -126,11 +126,11 @@ SELECT |
|
|
req_edns_dhu, -- Entrada: edns_dnssec_dhu STRING
|
|
|
req_edns_n3u, -- Entrada: edns_dnssec_n3u STRING
|
|
|
edns_client_subnet, -- Entrada: edns_client_subnet STRING
|
|
|
req_edns_other, -- Entrada: edns_other STRING
|
|
|
edns_other, -- Entrada: edns_other STRING
|
|
|
NULL, -- Entrada: edns_client_subnet_asn STRING
|
|
|
NULL, -- Entrada: edns_client_subnet_country STRING
|
|
|
if(length(qname) > 1, length(regexp_replace(qname, "[^\\.]", "")), 0), -- Entrada: labels INT
|
|
|
resp_pkt_len, -- Entrada: res_len INT
|
|
|
resp_net_len, -- Entrada: res_len INT
|
|
|
delay_us, -- Entrada: time_micro BIGINT
|
|
|
NULL, -- Entrada: resp_frag INT
|
|
|
NULL, -- Entrada: proc_time INT
|
... | ... | |