diff options
| author | chaoc <[email protected]> | 2023-07-13 13:39:19 +0800 |
|---|---|---|
| committer | chaoc <[email protected]> | 2023-07-13 13:39:19 +0800 |
| commit | 3f17d1aa98e92b43f8534eba1a7f8a7171f29678 (patch) | |
| tree | fc086cbcc7a541457093444007dedb97a2418c21 | |
| parent | 47850b02349a331e13fe03fddaf70439f0fa422a (diff) | |
| -rw-r--r-- | exec.sh | 5 | ||||
| -rw-r--r-- | query.sql | 2320 |
2 files changed, 2325 insertions, 0 deletions
@@ -0,0 +1,5 @@ +#!/bin/bash + +# 执行 SQL 导出结果 +clickhouse-client -h 127.0.0.1 --port 9001 -m -d tsg_galaxy_v3 -u tsg_query \ +--password '******' --queries-file query.sql --format_csv_delimiter="," > results.csv
\ No newline at end of file diff --git a/query.sql b/query.sql new file mode 100644 index 0000000..4dab3fc --- /dev/null +++ b/query.sql @@ -0,0 +1,2320 @@ +SELECT '"DAY"' AS tpe, + '"2023-07-10"' AS datetime, + '"2023-07-10 00:00:00"' AS start_time, + '"2023-07-11 00:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-11 00:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"DAY"' AS tpe, + '"2023-07-12"' AS datetime, + '"2023-07-12 00:00:00"' AS start_time, + '"2023-07-13 00:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-13 00:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"DAY"' AS tpe, + '"2023-06-30"' AS datetime, + '"2023-06-30 00:00:00"' AS start_time, + '"2023-07-01 00:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-01 00:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"DAY"' AS tpe, + '"2023-07-02"' AS datetime, + '"2023-07-02 00:00:00"' AS start_time, + '"2023-07-03 00:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-03 00:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-10 0:00-1:00"' AS datetime, + '"2023-07-10 00:00:00"' AS start_time, + '"2023-07-10 01:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 01:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-10 7:00-8:00"' AS datetime, + '"2023-07-10 07:00:00"' AS start_time, + '"2023-07-10 08:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 08:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-10 9:30-10:30"' AS datetime, + '"2023-07-10 09:30:00"' AS start_time, + '"2023-07-10 10:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 09:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 10:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-10 11:00-12:00"' AS datetime, + '"2023-07-10 11:00:00"' AS start_time, + '"2023-07-10 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-10 15:00-16:00"' AS datetime, + '"2023-07-10 15:00:00"' AS start_time, + '"2023-07-10 16:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 15:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-12 0:00-1:00"' AS datetime, + '"2023-07-12 00:00:00"' AS start_time, + '"2023-07-12 01:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 01:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-12 7:00-8:00"' AS datetime, + '"2023-07-12 07:00:00"' AS start_time, + '"2023-07-12 08:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 08:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-12 9:30-10:30"' AS datetime, + '"2023-07-12 09:30:00"' AS start_time, + '"2023-07-12 10:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 09:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 10:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-12 11:00-12:00"' AS datetime, + '"2023-07-12 11:00:00"' AS start_time, + '"2023-07-12 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-12 15:00-16:00"' AS datetime, + '"2023-07-12 15:00:00"' AS start_time, + '"2023-07-12 16:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 15:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-06-30 0:00-1:00"' AS datetime, + '"2023-06-30 00:00:00"' AS start_time, + '"2023-06-30 01:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 01:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-06-30 7:00-8:00"' AS datetime, + '"2023-06-30 07:00:00"' AS start_time, + '"2023-06-30 08:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 08:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-06-30 9:30-10:30"' AS datetime, + '"2023-06-30 09:30:00"' AS start_time, + '"2023-06-30 10:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 09:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 10:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-06-30 11:00-12:00"' AS datetime, + '"2023-06-30 11:00:00"' AS start_time, + '"2023-06-30 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-06-30 15:00-16:00"' AS datetime, + '"2023-06-30 15:00:00"' AS start_time, + '"2023-06-30 16:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 15:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-02 0:00-1:00"' AS datetime, + '"2023-07-02 00:00:00"' AS start_time, + '"2023-07-02 01:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 01:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-02 7:00-8:00"' AS datetime, + '"2023-07-02 07:00:00"' AS start_time, + '"2023-07-02 08:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 08:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-02 9:30-10:30"' AS datetime, + '"2023-07-02 09:30:00"' AS start_time, + '"2023-07-02 10:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 09:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 10:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-02 11:00-12:00"' AS datetime, + '"2023-07-02 11:00:00"' AS start_time, + '"2023-07-02 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HOUR"' AS tpe, + '"2023-07-02 15:00-16:00"' AS datetime, + '"2023-07-02 15:00:00"' AS start_time, + '"2023-07-02 16:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 15:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-10 0:00-0:30"' AS datetime, + '"2023-07-10 00:00:00"' AS start_time, + '"2023-07-10 00:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 00:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-10 6:00-6:30"' AS datetime, + '"2023-07-10 06:00:00"' AS start_time, + '"2023-07-10 06:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 06:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 06:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-10 11:30-12:00"' AS datetime, + '"2023-07-10 11:30:00"' AS start_time, + '"2023-07-10 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-10 16:30-17:00"' AS datetime, + '"2023-07-10 16:30:00"' AS start_time, + '"2023-07-10 17:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 17:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-12 0:00-0:30"' AS datetime, + '"2023-07-12 00:00:00"' AS start_time, + '"2023-07-12 00:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 00:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-12 6:00-6:30"' AS datetime, + '"2023-07-12 06:00:00"' AS start_time, + '"2023-07-12 06:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 06:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 06:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-12 11:30-12:00"' AS datetime, + '"2023-07-12 11:30:00"' AS start_time, + '"2023-07-12 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-12 16:30-17:00"' AS datetime, + '"2023-07-12 16:30:00"' AS start_time, + '"2023-07-12 17:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 17:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-06-30 0:00-0:30"' AS datetime, + '"2023-06-30 00:00:00"' AS start_time, + '"2023-06-30 00:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 00:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-06-30 6:00-6:30"' AS datetime, + '"2023-06-30 06:00:00"' AS start_time, + '"2023-06-30 06:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 06:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 06:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-06-30 11:30-12:00"' AS datetime, + '"2023-06-30 11:30:00"' AS start_time, + '"2023-06-30 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-06-30 16:30-17:00"' AS datetime, + '"2023-06-30 16:30:00"' AS start_time, + '"2023-06-30 17:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 17:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-02 0:00-0:30"' AS datetime, + '"2023-07-02 00:00:00"' AS start_time, + '"2023-07-02 00:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 00:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 00:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-02 6:00-6:30"' AS datetime, + '"2023-07-02 06:00:00"' AS start_time, + '"2023-07-02 06:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 06:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 06:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-02 11:30-12:00"' AS datetime, + '"2023-07-02 11:30:00"' AS start_time, + '"2023-07-02 12:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 12:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"HALF-HOUR"' AS tpe, + '"2023-07-02 16:30-17:00"' AS datetime, + '"2023-07-02 16:30:00"' AS start_time, + '"2023-07-02 17:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 17:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [07] -5:00-5:00"' AS datetime, + '"2023-07-10 06:55:00"' AS start_time, + '"2023-07-10 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 06:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [07] 15:00-25:00"' AS datetime, + '"2023-07-10 07:15:00"' AS start_time, + '"2023-07-10 07:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [07] 30:00-40:00"' AS datetime, + '"2023-07-10 07:30:00"' AS start_time, + '"2023-07-10 07:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [07] 45:00-55:00"' AS datetime, + '"2023-07-10 07:45:00"' AS start_time, + '"2023-07-10 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [10:30] -5:00-5:00"' AS datetime, + '"2023-07-10 10:25:00"' AS start_time, + '"2023-07-10 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:25:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [10:30] 15:00-25:00"' AS datetime, + '"2023-07-10 10:45:00"' AS start_time, + '"2023-07-10 10:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 10:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [10:30] 30:00-40:00"' AS datetime, + '"2023-07-10 11:00:00"' AS start_time, + '"2023-07-10 11:10:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:10:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [10:30] 45:00-55:00"' AS datetime, + '"2023-07-10 11:15:00"' AS start_time, + '"2023-07-10 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [11] -5:00-5:00"' AS datetime, + '"2023-07-10 10:55:00"' AS start_time, + '"2023-07-10 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [11] 15:00-25:00"' AS datetime, + '"2023-07-10 11:15:00"' AS start_time, + '"2023-07-10 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [11] 30:00-40:00"' AS datetime, + '"2023-07-10 11:30:00"' AS start_time, + '"2023-07-10 11:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [11] 45:00-55:00"' AS datetime, + '"2023-07-10 11:45:00"' AS start_time, + '"2023-07-10 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [16] -5:00-5:00"' AS datetime, + '"2023-07-10 15:55:00"' AS start_time, + '"2023-07-10 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 15:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [16] 15:00-25:00"' AS datetime, + '"2023-07-10 16:15:00"' AS start_time, + '"2023-07-10 16:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [16] 30:00-40:00"' AS datetime, + '"2023-07-10 16:30:00"' AS start_time, + '"2023-07-10 16:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-10 [16] 45:00-55:00"' AS datetime, + '"2023-07-10 16:45:00"' AS start_time, + '"2023-07-10 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [07] -5:00-5:00"' AS datetime, + '"2023-07-12 06:55:00"' AS start_time, + '"2023-07-12 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 06:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [07] 15:00-25:00"' AS datetime, + '"2023-07-12 07:15:00"' AS start_time, + '"2023-07-12 07:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [07] 30:00-40:00"' AS datetime, + '"2023-07-12 07:30:00"' AS start_time, + '"2023-07-12 07:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [07] 45:00-55:00"' AS datetime, + '"2023-07-12 07:45:00"' AS start_time, + '"2023-07-12 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [10:30] -5:00-5:00"' AS datetime, + '"2023-07-12 10:25:00"' AS start_time, + '"2023-07-12 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:25:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [10:30] 15:00-25:00"' AS datetime, + '"2023-07-12 10:45:00"' AS start_time, + '"2023-07-12 10:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 10:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [10:30] 30:00-40:00"' AS datetime, + '"2023-07-12 11:00:00"' AS start_time, + '"2023-07-12 11:10:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:10:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [10:30] 45:00-55:00"' AS datetime, + '"2023-07-12 11:15:00"' AS start_time, + '"2023-07-12 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [11] -5:00-5:00"' AS datetime, + '"2023-07-12 10:55:00"' AS start_time, + '"2023-07-12 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [11] 15:00-25:00"' AS datetime, + '"2023-07-12 11:15:00"' AS start_time, + '"2023-07-12 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [11] 30:00-40:00"' AS datetime, + '"2023-07-12 11:30:00"' AS start_time, + '"2023-07-12 11:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [11] 45:00-55:00"' AS datetime, + '"2023-07-12 11:45:00"' AS start_time, + '"2023-07-12 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [16] -5:00-5:00"' AS datetime, + '"2023-07-12 15:55:00"' AS start_time, + '"2023-07-12 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 15:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [16] 15:00-25:00"' AS datetime, + '"2023-07-12 16:15:00"' AS start_time, + '"2023-07-12 16:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [16] 30:00-40:00"' AS datetime, + '"2023-07-12 16:30:00"' AS start_time, + '"2023-07-12 16:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-12 [16] 45:00-55:00"' AS datetime, + '"2023-07-12 16:45:00"' AS start_time, + '"2023-07-12 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [07] -5:00-5:00"' AS datetime, + '"2023-06-30 06:55:00"' AS start_time, + '"2023-06-30 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 06:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [07] 15:00-25:00"' AS datetime, + '"2023-06-30 07:15:00"' AS start_time, + '"2023-06-30 07:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [07] 30:00-40:00"' AS datetime, + '"2023-06-30 07:30:00"' AS start_time, + '"2023-06-30 07:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [07] 45:00-55:00"' AS datetime, + '"2023-06-30 07:45:00"' AS start_time, + '"2023-06-30 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [10:30] -5:00-5:00"' AS datetime, + '"2023-06-30 10:25:00"' AS start_time, + '"2023-06-30 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:25:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [10:30] 15:00-25:00"' AS datetime, + '"2023-06-30 10:45:00"' AS start_time, + '"2023-06-30 10:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 10:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [10:30] 30:00-40:00"' AS datetime, + '"2023-06-30 11:00:00"' AS start_time, + '"2023-06-30 11:10:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:10:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [10:30] 45:00-55:00"' AS datetime, + '"2023-06-30 11:15:00"' AS start_time, + '"2023-06-30 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [11] -5:00-5:00"' AS datetime, + '"2023-06-30 10:55:00"' AS start_time, + '"2023-06-30 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [11] 15:00-25:00"' AS datetime, + '"2023-06-30 11:15:00"' AS start_time, + '"2023-06-30 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [11] 30:00-40:00"' AS datetime, + '"2023-06-30 11:30:00"' AS start_time, + '"2023-06-30 11:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [11] 45:00-55:00"' AS datetime, + '"2023-06-30 11:45:00"' AS start_time, + '"2023-06-30 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [16] -5:00-5:00"' AS datetime, + '"2023-06-30 15:55:00"' AS start_time, + '"2023-06-30 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 15:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [16] 15:00-25:00"' AS datetime, + '"2023-06-30 16:15:00"' AS start_time, + '"2023-06-30 16:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [16] 30:00-40:00"' AS datetime, + '"2023-06-30 16:30:00"' AS start_time, + '"2023-06-30 16:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-06-30 [16] 45:00-55:00"' AS datetime, + '"2023-06-30 16:45:00"' AS start_time, + '"2023-06-30 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [07] -5:00-5:00"' AS datetime, + '"2023-07-02 06:55:00"' AS start_time, + '"2023-07-02 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 06:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [07] 15:00-25:00"' AS datetime, + '"2023-07-02 07:15:00"' AS start_time, + '"2023-07-02 07:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [07] 30:00-40:00"' AS datetime, + '"2023-07-02 07:30:00"' AS start_time, + '"2023-07-02 07:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [07] 45:00-55:00"' AS datetime, + '"2023-07-02 07:45:00"' AS start_time, + '"2023-07-02 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [10:30] -5:00-5:00"' AS datetime, + '"2023-07-02 10:25:00"' AS start_time, + '"2023-07-02 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:25:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [10:30] 15:00-25:00"' AS datetime, + '"2023-07-02 10:45:00"' AS start_time, + '"2023-07-02 10:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 10:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [10:30] 30:00-40:00"' AS datetime, + '"2023-07-02 11:00:00"' AS start_time, + '"2023-07-02 11:10:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:10:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [10:30] 45:00-55:00"' AS datetime, + '"2023-07-02 11:15:00"' AS start_time, + '"2023-07-02 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [11] -5:00-5:00"' AS datetime, + '"2023-07-02 10:55:00"' AS start_time, + '"2023-07-02 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [11] 15:00-25:00"' AS datetime, + '"2023-07-02 11:15:00"' AS start_time, + '"2023-07-02 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [11] 30:00-40:00"' AS datetime, + '"2023-07-02 11:30:00"' AS start_time, + '"2023-07-02 11:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [11] 45:00-55:00"' AS datetime, + '"2023-07-02 11:45:00"' AS start_time, + '"2023-07-02 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [16] -5:00-5:00"' AS datetime, + '"2023-07-02 15:55:00"' AS start_time, + '"2023-07-02 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 15:55:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [16] 15:00-25:00"' AS datetime, + '"2023-07-02 16:15:00"' AS start_time, + '"2023-07-02 16:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [16] 30:00-40:00"' AS datetime, + '"2023-07-02 16:30:00"' AS start_time, + '"2023-07-02 16:40:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:40:00', 'Asia/Shanghai') +UNION ALL +SELECT '"TEN-MIN"' AS tpe, + '"2023-07-02 [16] 45:00-55:00"' AS datetime, + '"2023-07-02 16:45:00"' AS start_time, + '"2023-07-02 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [07] 0:00-5:00"' AS datetime, + '"2023-07-10 07:00:00"' AS start_time, + '"2023-07-10 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [07] 27:00-32:00"' AS datetime, + '"2023-07-10 07:27:00"' AS start_time, + '"2023-07-10 07:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [07] 42:00-47:00"' AS datetime, + '"2023-07-10 07:42:00"' AS start_time, + '"2023-07-10 07:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [07] 50:00-55:00"' AS datetime, + '"2023-07-10 07:50:00"' AS start_time, + '"2023-07-10 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [10:30] 0:00-5:00"' AS datetime, + '"2023-07-10 10:30:00"' AS start_time, + '"2023-07-10 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [10:30] 27:00-32:00"' AS datetime, + '"2023-07-10 10:57:00"' AS start_time, + '"2023-07-10 11:02:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:57:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:02:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [10:30] 42:00-47:00"' AS datetime, + '"2023-07-10 11:12:00"' AS start_time, + '"2023-07-10 11:17:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:12:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:17:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [10:30] 50:00-55:00"' AS datetime, + '"2023-07-10 11:20:00"' AS start_time, + '"2023-07-10 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:20:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [11] 0:00-5:00"' AS datetime, + '"2023-07-10 11:00:00"' AS start_time, + '"2023-07-10 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [11] 27:00-32:00"' AS datetime, + '"2023-07-10 11:27:00"' AS start_time, + '"2023-07-10 11:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [11] 42:00-47:00"' AS datetime, + '"2023-07-10 11:42:00"' AS start_time, + '"2023-07-10 11:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [11] 50:00-55:00"' AS datetime, + '"2023-07-10 11:50:00"' AS start_time, + '"2023-07-10 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [16] 0:00-5:00"' AS datetime, + '"2023-07-10 16:00:00"' AS start_time, + '"2023-07-10 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [16] 27:00-32:00"' AS datetime, + '"2023-07-10 16:27:00"' AS start_time, + '"2023-07-10 16:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [16] 42:00-47:00"' AS datetime, + '"2023-07-10 16:42:00"' AS start_time, + '"2023-07-10 16:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-10 [16] 50:00-55:00"' AS datetime, + '"2023-07-10 16:50:00"' AS start_time, + '"2023-07-10 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [07] 0:00-5:00"' AS datetime, + '"2023-07-12 07:00:00"' AS start_time, + '"2023-07-12 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [07] 27:00-32:00"' AS datetime, + '"2023-07-12 07:27:00"' AS start_time, + '"2023-07-12 07:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [07] 42:00-47:00"' AS datetime, + '"2023-07-12 07:42:00"' AS start_time, + '"2023-07-12 07:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [07] 50:00-55:00"' AS datetime, + '"2023-07-12 07:50:00"' AS start_time, + '"2023-07-12 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [10:30] 0:00-5:00"' AS datetime, + '"2023-07-12 10:30:00"' AS start_time, + '"2023-07-12 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [10:30] 27:00-32:00"' AS datetime, + '"2023-07-12 10:57:00"' AS start_time, + '"2023-07-12 11:02:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:57:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:02:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [10:30] 42:00-47:00"' AS datetime, + '"2023-07-12 11:12:00"' AS start_time, + '"2023-07-12 11:17:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:12:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:17:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [10:30] 50:00-55:00"' AS datetime, + '"2023-07-12 11:20:00"' AS start_time, + '"2023-07-12 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:20:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [11] 0:00-5:00"' AS datetime, + '"2023-07-12 11:00:00"' AS start_time, + '"2023-07-12 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [11] 27:00-32:00"' AS datetime, + '"2023-07-12 11:27:00"' AS start_time, + '"2023-07-12 11:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [11] 42:00-47:00"' AS datetime, + '"2023-07-12 11:42:00"' AS start_time, + '"2023-07-12 11:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [11] 50:00-55:00"' AS datetime, + '"2023-07-12 11:50:00"' AS start_time, + '"2023-07-12 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [16] 0:00-5:00"' AS datetime, + '"2023-07-12 16:00:00"' AS start_time, + '"2023-07-12 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [16] 27:00-32:00"' AS datetime, + '"2023-07-12 16:27:00"' AS start_time, + '"2023-07-12 16:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [16] 42:00-47:00"' AS datetime, + '"2023-07-12 16:42:00"' AS start_time, + '"2023-07-12 16:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-12 [16] 50:00-55:00"' AS datetime, + '"2023-07-12 16:50:00"' AS start_time, + '"2023-07-12 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [07] 0:00-5:00"' AS datetime, + '"2023-06-30 07:00:00"' AS start_time, + '"2023-06-30 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [07] 27:00-32:00"' AS datetime, + '"2023-06-30 07:27:00"' AS start_time, + '"2023-06-30 07:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [07] 42:00-47:00"' AS datetime, + '"2023-06-30 07:42:00"' AS start_time, + '"2023-06-30 07:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [07] 50:00-55:00"' AS datetime, + '"2023-06-30 07:50:00"' AS start_time, + '"2023-06-30 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [10:30] 0:00-5:00"' AS datetime, + '"2023-06-30 10:30:00"' AS start_time, + '"2023-06-30 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [10:30] 27:00-32:00"' AS datetime, + '"2023-06-30 10:57:00"' AS start_time, + '"2023-06-30 11:02:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:57:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:02:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [10:30] 42:00-47:00"' AS datetime, + '"2023-06-30 11:12:00"' AS start_time, + '"2023-06-30 11:17:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:12:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:17:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [10:30] 50:00-55:00"' AS datetime, + '"2023-06-30 11:20:00"' AS start_time, + '"2023-06-30 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:20:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [11] 0:00-5:00"' AS datetime, + '"2023-06-30 11:00:00"' AS start_time, + '"2023-06-30 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [11] 27:00-32:00"' AS datetime, + '"2023-06-30 11:27:00"' AS start_time, + '"2023-06-30 11:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [11] 42:00-47:00"' AS datetime, + '"2023-06-30 11:42:00"' AS start_time, + '"2023-06-30 11:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [11] 50:00-55:00"' AS datetime, + '"2023-06-30 11:50:00"' AS start_time, + '"2023-06-30 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [16] 0:00-5:00"' AS datetime, + '"2023-06-30 16:00:00"' AS start_time, + '"2023-06-30 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [16] 27:00-32:00"' AS datetime, + '"2023-06-30 16:27:00"' AS start_time, + '"2023-06-30 16:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [16] 42:00-47:00"' AS datetime, + '"2023-06-30 16:42:00"' AS start_time, + '"2023-06-30 16:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-06-30 [16] 50:00-55:00"' AS datetime, + '"2023-06-30 16:50:00"' AS start_time, + '"2023-06-30 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [07] 0:00-5:00"' AS datetime, + '"2023-07-02 07:00:00"' AS start_time, + '"2023-07-02 07:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [07] 27:00-32:00"' AS datetime, + '"2023-07-02 07:27:00"' AS start_time, + '"2023-07-02 07:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [07] 42:00-47:00"' AS datetime, + '"2023-07-02 07:42:00"' AS start_time, + '"2023-07-02 07:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [07] 50:00-55:00"' AS datetime, + '"2023-07-02 07:50:00"' AS start_time, + '"2023-07-02 07:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [10:30] 0:00-5:00"' AS datetime, + '"2023-07-02 10:30:00"' AS start_time, + '"2023-07-02 10:35:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 10:35:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [10:30] 27:00-32:00"' AS datetime, + '"2023-07-02 10:57:00"' AS start_time, + '"2023-07-02 11:02:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:57:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:02:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [10:30] 42:00-47:00"' AS datetime, + '"2023-07-02 11:12:00"' AS start_time, + '"2023-07-02 11:17:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:12:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:17:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [10:30] 50:00-55:00"' AS datetime, + '"2023-07-02 11:20:00"' AS start_time, + '"2023-07-02 11:25:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:20:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:25:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [11] 0:00-5:00"' AS datetime, + '"2023-07-02 11:00:00"' AS start_time, + '"2023-07-02 11:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [11] 27:00-32:00"' AS datetime, + '"2023-07-02 11:27:00"' AS start_time, + '"2023-07-02 11:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [11] 42:00-47:00"' AS datetime, + '"2023-07-02 11:42:00"' AS start_time, + '"2023-07-02 11:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [11] 50:00-55:00"' AS datetime, + '"2023-07-02 11:50:00"' AS start_time, + '"2023-07-02 11:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [16] 0:00-5:00"' AS datetime, + '"2023-07-02 16:00:00"' AS start_time, + '"2023-07-02 16:05:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:05:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [16] 27:00-32:00"' AS datetime, + '"2023-07-02 16:27:00"' AS start_time, + '"2023-07-02 16:32:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:27:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:32:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [16] 42:00-47:00"' AS datetime, + '"2023-07-02 16:42:00"' AS start_time, + '"2023-07-02 16:47:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:42:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:47:00', 'Asia/Shanghai') +UNION ALL +SELECT '"FIVE-MIN"' AS tpe, + '"2023-07-02 [16] 50:00-55:00"' AS datetime, + '"2023-07-02 16:50:00"' AS start_time, + '"2023-07-02 16:55:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:50:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:55:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [07] 0:00-1:00"' AS datetime, + '"2023-07-10 07:00:00"' AS start_time, + '"2023-07-10 07:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [07] 15:00-16:00"' AS datetime, + '"2023-07-10 07:15:00"' AS start_time, + '"2023-07-10 07:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [07] 29:00-30:00"' AS datetime, + '"2023-07-10 07:29:00"' AS start_time, + '"2023-07-10 07:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [07] 40:00-41:00"' AS datetime, + '"2023-07-10 07:40:00"' AS start_time, + '"2023-07-10 07:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 07:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 07:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [10:30] 0:00-1:00"' AS datetime, + '"2023-07-10 10:30:00"' AS start_time, + '"2023-07-10 10:31:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 10:31:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [10:30] 15:00-16:00"' AS datetime, + '"2023-07-10 10:45:00"' AS start_time, + '"2023-07-10 10:46:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 10:46:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [10:30] 29:00-30:00"' AS datetime, + '"2023-07-10 10:59:00"' AS start_time, + '"2023-07-10 11:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 10:59:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [10:30] 40:00-41:00"' AS datetime, + '"2023-07-10 11:10:00"' AS start_time, + '"2023-07-10 11:11:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:10:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:11:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [11] 0:00-1:00"' AS datetime, + '"2023-07-10 11:00:00"' AS start_time, + '"2023-07-10 11:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [11] 15:00-16:00"' AS datetime, + '"2023-07-10 11:15:00"' AS start_time, + '"2023-07-10 11:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [11] 29:00-30:00"' AS datetime, + '"2023-07-10 11:29:00"' AS start_time, + '"2023-07-10 11:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [11] 40:00-41:00"' AS datetime, + '"2023-07-10 11:40:00"' AS start_time, + '"2023-07-10 11:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 11:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 11:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [16] 0:00-1:00"' AS datetime, + '"2023-07-10 16:00:00"' AS start_time, + '"2023-07-10 16:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [16] 15:00-16:00"' AS datetime, + '"2023-07-10 16:15:00"' AS start_time, + '"2023-07-10 16:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [16] 29:00-30:00"' AS datetime, + '"2023-07-10 16:29:00"' AS start_time, + '"2023-07-10 16:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-10 [16] 40:00-41:00"' AS datetime, + '"2023-07-10 16:40:00"' AS start_time, + '"2023-07-10 16:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-10 16:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-10 16:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [07] 0:00-1:00"' AS datetime, + '"2023-07-12 07:00:00"' AS start_time, + '"2023-07-12 07:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [07] 15:00-16:00"' AS datetime, + '"2023-07-12 07:15:00"' AS start_time, + '"2023-07-12 07:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [07] 29:00-30:00"' AS datetime, + '"2023-07-12 07:29:00"' AS start_time, + '"2023-07-12 07:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [07] 40:00-41:00"' AS datetime, + '"2023-07-12 07:40:00"' AS start_time, + '"2023-07-12 07:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 07:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 07:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [10:30] 0:00-1:00"' AS datetime, + '"2023-07-12 10:30:00"' AS start_time, + '"2023-07-12 10:31:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 10:31:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [10:30] 15:00-16:00"' AS datetime, + '"2023-07-12 10:45:00"' AS start_time, + '"2023-07-12 10:46:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 10:46:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [10:30] 29:00-30:00"' AS datetime, + '"2023-07-12 10:59:00"' AS start_time, + '"2023-07-12 11:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 10:59:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [10:30] 40:00-41:00"' AS datetime, + '"2023-07-12 11:10:00"' AS start_time, + '"2023-07-12 11:11:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:10:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:11:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [11] 0:00-1:00"' AS datetime, + '"2023-07-12 11:00:00"' AS start_time, + '"2023-07-12 11:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [11] 15:00-16:00"' AS datetime, + '"2023-07-12 11:15:00"' AS start_time, + '"2023-07-12 11:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [11] 29:00-30:00"' AS datetime, + '"2023-07-12 11:29:00"' AS start_time, + '"2023-07-12 11:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [11] 40:00-41:00"' AS datetime, + '"2023-07-12 11:40:00"' AS start_time, + '"2023-07-12 11:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 11:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 11:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [16] 0:00-1:00"' AS datetime, + '"2023-07-12 16:00:00"' AS start_time, + '"2023-07-12 16:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [16] 15:00-16:00"' AS datetime, + '"2023-07-12 16:15:00"' AS start_time, + '"2023-07-12 16:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [16] 29:00-30:00"' AS datetime, + '"2023-07-12 16:29:00"' AS start_time, + '"2023-07-12 16:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-12 [16] 40:00-41:00"' AS datetime, + '"2023-07-12 16:40:00"' AS start_time, + '"2023-07-12 16:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-12 16:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-12 16:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [07] 0:00-1:00"' AS datetime, + '"2023-06-30 07:00:00"' AS start_time, + '"2023-06-30 07:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [07] 15:00-16:00"' AS datetime, + '"2023-06-30 07:15:00"' AS start_time, + '"2023-06-30 07:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [07] 29:00-30:00"' AS datetime, + '"2023-06-30 07:29:00"' AS start_time, + '"2023-06-30 07:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [07] 40:00-41:00"' AS datetime, + '"2023-06-30 07:40:00"' AS start_time, + '"2023-06-30 07:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 07:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 07:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [10:30] 0:00-1:00"' AS datetime, + '"2023-06-30 10:30:00"' AS start_time, + '"2023-06-30 10:31:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 10:31:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [10:30] 15:00-16:00"' AS datetime, + '"2023-06-30 10:45:00"' AS start_time, + '"2023-06-30 10:46:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 10:46:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [10:30] 29:00-30:00"' AS datetime, + '"2023-06-30 10:59:00"' AS start_time, + '"2023-06-30 11:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 10:59:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [10:30] 40:00-41:00"' AS datetime, + '"2023-06-30 11:10:00"' AS start_time, + '"2023-06-30 11:11:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:10:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:11:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [11] 0:00-1:00"' AS datetime, + '"2023-06-30 11:00:00"' AS start_time, + '"2023-06-30 11:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [11] 15:00-16:00"' AS datetime, + '"2023-06-30 11:15:00"' AS start_time, + '"2023-06-30 11:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [11] 29:00-30:00"' AS datetime, + '"2023-06-30 11:29:00"' AS start_time, + '"2023-06-30 11:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [11] 40:00-41:00"' AS datetime, + '"2023-06-30 11:40:00"' AS start_time, + '"2023-06-30 11:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 11:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 11:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [16] 0:00-1:00"' AS datetime, + '"2023-06-30 16:00:00"' AS start_time, + '"2023-06-30 16:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [16] 15:00-16:00"' AS datetime, + '"2023-06-30 16:15:00"' AS start_time, + '"2023-06-30 16:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [16] 29:00-30:00"' AS datetime, + '"2023-06-30 16:29:00"' AS start_time, + '"2023-06-30 16:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-06-30 [16] 40:00-41:00"' AS datetime, + '"2023-06-30 16:40:00"' AS start_time, + '"2023-06-30 16:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-06-30 16:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-06-30 16:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [07] 0:00-1:00"' AS datetime, + '"2023-07-02 07:00:00"' AS start_time, + '"2023-07-02 07:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [07] 15:00-16:00"' AS datetime, + '"2023-07-02 07:15:00"' AS start_time, + '"2023-07-02 07:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [07] 29:00-30:00"' AS datetime, + '"2023-07-02 07:29:00"' AS start_time, + '"2023-07-02 07:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [07] 40:00-41:00"' AS datetime, + '"2023-07-02 07:40:00"' AS start_time, + '"2023-07-02 07:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 07:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 07:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [10:30] 0:00-1:00"' AS datetime, + '"2023-07-02 10:30:00"' AS start_time, + '"2023-07-02 10:31:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:30:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 10:31:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [10:30] 15:00-16:00"' AS datetime, + '"2023-07-02 10:45:00"' AS start_time, + '"2023-07-02 10:46:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:45:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 10:46:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [10:30] 29:00-30:00"' AS datetime, + '"2023-07-02 10:59:00"' AS start_time, + '"2023-07-02 11:00:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 10:59:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:00:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [10:30] 40:00-41:00"' AS datetime, + '"2023-07-02 11:10:00"' AS start_time, + '"2023-07-02 11:11:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:10:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:11:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [11] 0:00-1:00"' AS datetime, + '"2023-07-02 11:00:00"' AS start_time, + '"2023-07-02 11:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [11] 15:00-16:00"' AS datetime, + '"2023-07-02 11:15:00"' AS start_time, + '"2023-07-02 11:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [11] 29:00-30:00"' AS datetime, + '"2023-07-02 11:29:00"' AS start_time, + '"2023-07-02 11:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [11] 40:00-41:00"' AS datetime, + '"2023-07-02 11:40:00"' AS start_time, + '"2023-07-02 11:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 11:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 11:41:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [16] 0:00-1:00"' AS datetime, + '"2023-07-02 16:00:00"' AS start_time, + '"2023-07-02 16:01:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:00:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:01:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [16] 15:00-16:00"' AS datetime, + '"2023-07-02 16:15:00"' AS start_time, + '"2023-07-02 16:16:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:15:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:16:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [16] 29:00-30:00"' AS datetime, + '"2023-07-02 16:29:00"' AS start_time, + '"2023-07-02 16:30:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:29:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:30:00', 'Asia/Shanghai') +UNION ALL +SELECT '"MIN"' AS tpe, + '"2023-07-02 [16] 40:00-41:00"' AS datetime, + '"2023-07-02 16:40:00"' AS start_time, + '"2023-07-02 16:41:00"' AS end_time, + count(DISTINCT http_domain) AS unique_domain_size, + count(DISTINCT http_host, ssl_sni, quic_sni) AS unique_fqdn_size +FROM session_record +WHERE common_recv_time >= toDateTime('2023-07-02 16:40:00', 'Asia/Shanghai') + AND common_recv_time < toDateTime('2023-07-02 16:41:00', 'Asia/Shanghai') +FORMAT CSV;
\ No newline at end of file |