vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-30 16:09:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Added creation of clickhouse aggregated flows table

Browse source
This commit is contained in:
Luca Deri 2023-05-19 16:15:36 +02:00
parent 6760c2bb77
commit dba12047e3
2 changed files with 47 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

25
httpdocs/misc/db_schema_clickhouse.sql
View file

@ -482,4 +482,27 @@ CREATE TABLE IF NOT EXISTS `flow_risks` (
CREATE TABLE IF NOT EXISTS `alert_severities` (
`id` UInt16 NOT NULL,
`name` String NOT NULL
) ENGINE = ReplacingMergeTree() ORDER BY (id);
) ENGINE = ReplacingMergeTree() ORDER BY (id);
@
CREATE TABLE IF NOT EXISTS `ntopng.aggregated_flows` (
FLOW_ID UInt64,
IP_PROTOCOL_VERSION UInt8,
MIN_FIRST_SEEN DateTime,
MAX_LAST_SEEN DateTime,
VLAN_ID UInt16,
SUM_PACKETS UInt32,
SUM_SRC2DST_BYTES UInt64,
SUM_DST2SRC_BYTES UInt64,
SUM_SCORE UInt16,
PROTOCOL UInt8,
IPV4_SRC_ADDR UInt32,
IPV6_SRC_ADDR IPv6,
IPV4_DST_ADDR UInt32,
IPV6_DST_ADDR IPv6,
IP_DST_PORT UInt16,
L7_PROTO UInt16,
L7_PROTO_MASTER UInt16,
NTOPNG_INSTANCE_NAME String
) ENGINE = MergeTree() PARTITION BY toYYYYMMDD(MIN_FIRST_SEEN) ORDER BY (IPV4_SRC_ADDR, IPV4_DST_ADDR, MIN_FIRST_SEEN);