"database": "system", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "event_time", "datetimeLoading": false, "expr": "", "formattedQuery": " <font color=\"darkcyan\">$rateColumns</font>(<br /> <font color=\"navajowhite\">substring</font>(query, <font color=\"cornflowerblue\">1</font>, <font color=\"cornflowerblue\">45</font>) <font color=\"darkorange\">AS</font> query,<br /> <font color=\"navajowhite\">count</font>() c)<br /> <font color=\"darkorange\">FROM</font> <font color=\"darkcyan\">$table</font><br /> <font color=\"darkorange\">WHERE</font><br /> <font color=\"navajowhite\">cityHash64</font>(query) <font color=\"darkorange\">global</font> <font color=\"darkorange\">in</font> (<br /> <font color=\"darkorange\">SELECT</font> <font color=\"navajowhite\">cityHash64</font>(<font color=\"navajowhite\">substring</font>(query, <font color=\"cornflowerblue\">1</font>, <font color=\"cornflowerblue\">45</font>)) <font color=\"darkorange\">AS</font> h<br /> <font color=\"darkorange\">FROM</font> <font color=\"darkcyan\">$table</font><br /> <font color=\"darkorange\">WHERE</font><br /> <font color=\"darkcyan\">$timeFilter</font><br /> <font color=\"yellow\">AND</font> <font color=\"darkorange\">type</font> <font color=\"darkorange\">in</font> (<font color=\"darkcyan\">$type</font>)<br /> <font color=\"yellow\">AND</font> initial_user <font color=\"darkorange\">in</font> (<font color=\"darkcyan\">$user</font>)<br /> <font color=\"yellow\">AND</font>(<font color=\"lightgreen\">'$query_type'</font> <font color=\"yellow\">=</font> <font color=\"lightgreen\">'all'</font> <font color=\"yellow\">or</font>(positionCaseInsensitive(query, <font color=\"lightgreen\">'$query_type'</font>) <font color=\"yellow\">=</font> <font color=\"cornflowerblue\">1</font>))<br /> <font color=\"darkorange\">GROUP BY</font> h<br /> <font color=\"darkorange\">ORDER BY</font> <font color=\"navajowhite\">count</font>() <font color=\"darkorange\">desc</font><br /> <font color=\"darkorange\">LIMIT</font> <font color=\"darkcyan\">$top</font>)<br /> <font color=\"yellow\">AND</font> <font color=\"darkorange\">type</font> <font color=\"darkorange\">in</font> (<font color=\"darkcyan\">$type</font>)<br /> <font color=\"yellow\">AND</font> initial_user <font color=\"darkorange\">in</font> (<font color=\"darkcyan\">$user</font>)<br /> <font color=\"yellow\">AND</font>(<font color=\"lightgreen\">'$query_type'</font> <font color=\"yellow\">=</font> <font color=\"lightgreen\">'all'</font> <font color=\"yellow\">or</font>(positionCaseInsensitive(query, <font color=\"lightgreen\">'$query_type'</font>) <font color=\"yellow\">=</font> <font color=\"cornflowerblue\">1</font>))", "intervalFactor": 2, "query": "$rateColumns(\n substring(query, 1, 45) AS query,\n count() c)\nFROM $table\nWHERE\n cityHash64(query) global in (\n SELECT cityHash64(substring(query, 1, 45)) AS h\n FROM $table\n WHERE\n $timeFilter\n AND type in ($type)\n AND initial_user in ($user)\n AND('$query_type' = 'all' or(positionCaseInsensitive(query, '$query_type') = 1))\n GROUP BY h\n ORDER BY count() desc\n LIMIT $top)\n AND type in ($type)\n AND initial_user in ($user)\n AND('$query_type' = 'all' or(positionCaseInsensitive(query, '$query_type') = 1))", "rawQuery": "SELECT t, arrayMap(a -> (a.1, a.2/runningDifference( t/1000 )), groupArr) FROM (SELECT t, groupArray((query, c)) as groupArr FROM ( SELECT (intDiv(toUInt32(event_time), 2) * 2) * 1000 as t, substring(query, 1, 45) AS query, count() c FROM system.query_log WHERE event_date >= toDate(1498209947) AND event_time >= toDateTime(1498209947) AND cityHash64(query) global in ( SELECT cityHash64(substring(query, 1, 45)) AS h FROM system.query_log WHERE event_date >= toDate(1498209947) AND event_time >= toDateTime(1498209947) AND type in (1,2,3,4) AND initial_user in ('default') AND('all' = 'all' or(positionCaseInsensitive(query, 'all') = 1)) GROUP BY h ORDER BY count() desc LIMIT 5) AND type in (1,2,3,4) AND initial_user in ('default') AND('all' = 'all' or(positionCaseInsensitive(query, 'all') = 1)) GROUP BY t, query ORDER BY t) GROUP BY t ORDER BY t)", "refId": "A", "resultFormat": "time_series", "table": "query_log", "tableLoading": false } |