summaryrefslogtreecommitdiff
path: root/TWA-PIC/hbase/bin/create-phoenix-table.sh
diff options
context:
space:
mode:
Diffstat (limited to 'TWA-PIC/hbase/bin/create-phoenix-table.sh')
-rw-r--r--TWA-PIC/hbase/bin/create-phoenix-table.sh394
1 files changed, 394 insertions, 0 deletions
diff --git a/TWA-PIC/hbase/bin/create-phoenix-table.sh b/TWA-PIC/hbase/bin/create-phoenix-table.sh
new file mode 100644
index 0000000..57b8ea3
--- /dev/null
+++ b/TWA-PIC/hbase/bin/create-phoenix-table.sh
@@ -0,0 +1,394 @@
+#!/bin/bash
+
+source /etc/profile
+
+phoenix_path=/home/tsg/olap/phoenix-hbase-2.2-5.1.2-bin/bin
+
+$phoenix_path/sqlline.py<<EOF
+
+CREATE schema IF NOT EXISTS "tsg_galaxy";
+CREATE schema IF NOT EXISTS "tsg";
+
+CREATE view "tsg"."report_result"( ROWKEY VARCHAR PRIMARY KEY, "detail"."excute_sql" VARCHAR, "detail"."read_rows" UNSIGNED_LONG, "detail"."result_id" UNSIGNED_INT, "response"."result" VARCHAR);
+
+CREATE view IF NOT EXISTS "tsg_galaxy"."relation_account_framedip"(
+ROWKEY VARCHAR PRIMARY KEY,
+"common"."vsys_id" UNSIGNED_INT,
+"radius"."account" VARCHAR,
+"radius"."framed_ip" VARCHAR,
+"radius"."first_found_time" UNSIGNED_LONG,
+"radius"."last_update_time" UNSIGNED_LONG,
+"radius"."acct_status_type" UNSIGNED_INT);
+
+CREATE view "tsg_galaxy"."recommendation_app_cip"(
+ROWKEY VARCHAR PRIMARY KEY,
+"common"."app_label" VARCHAR,
+"common"."client_ip_list" VARCHAR,
+"common"."last_update_time" UNSIGNED_LONG);
+
+CREATE view IF NOT EXISTS "tsg_galaxy"."gtpc_knowledge_base"(
+ROWKEY VARCHAR PRIMARY KEY,
+"common"."vsys_id" UNSIGNED_INT,
+"gtp"."teid" UNSIGNED_LONG,
+"gtp"."uplink_teid" UNSIGNED_LONG,
+"gtp"."downlink_teid" UNSIGNED_LONG,
+"gtp"."apn" VARCHAR,
+"gtp"."phone_number" VARCHAR,
+"gtp"."imsi" VARCHAR,
+"gtp"."imei" VARCHAR,
+"gtp"."msg_type" UNSIGNED_INT,
+"gtp"."last_update_time" UNSIGNED_LONG);
+
+CREATE table IF NOT EXISTS "tsg_galaxy"."job_result"(
+ROWKEY VARCHAR PRIMARY KEY,
+"detail"."is_failed" BOOLEAN,
+"detail"."is_canceled" BOOLEAN,
+"detail"."is_done" BOOLEAN,
+"detail"."done_progress" UNSIGNED_FLOAT,
+"detail"."last_query_time" UNSIGNED_LONG,
+"detail"."duration_time" UNSIGNED_LONG,
+"detail"."count" UNSIGNED_LONG,
+"detail"."job_property" VARCHAR,
+"statistics"."result" VARCHAR,
+"field_discovery"."common_recv_time" VARCHAR,
+"field_discovery"."common_log_id" VARCHAR,
+"field_discovery"."common_policy_id" VARCHAR,
+"field_discovery"."common_subscriber_id" VARCHAR,
+"field_discovery"."common_imei" VARCHAR,
+"field_discovery"."common_imsi" VARCHAR,
+"field_discovery"."common_phone_number" VARCHAR,
+"field_discovery"."common_client_ip" VARCHAR,
+"field_discovery"."common_internal_ip" VARCHAR,
+"field_discovery"."common_client_port" VARCHAR,
+"field_discovery"."common_l4_protocol" VARCHAR,
+"field_discovery"."common_address_type" VARCHAR,
+"field_discovery"."common_server_ip" VARCHAR,
+"field_discovery"."common_server_port" VARCHAR,
+"field_discovery"."common_external_ip" VARCHAR,
+"field_discovery"."common_action" VARCHAR,
+"field_discovery"."common_direction" VARCHAR,
+"field_discovery"."common_entrance_id" VARCHAR,
+"field_discovery"."common_sled_ip" VARCHAR,
+"field_discovery"."common_client_location" VARCHAR,
+"field_discovery"."common_client_asn" VARCHAR,
+"field_discovery"."common_server_location" VARCHAR,
+"field_discovery"."common_server_asn" VARCHAR,
+"field_discovery"."common_server_fqdn" VARCHAR,
+"field_discovery"."common_server_domain" VARCHAR,
+"field_discovery"."common_sessions" VARCHAR,
+"field_discovery"."common_c2s_pkt_num" VARCHAR,
+"field_discovery"."common_s2c_pkt_num" VARCHAR,
+"field_discovery"."common_c2s_byte_num" VARCHAR,
+"field_discovery"."common_s2c_byte_num" VARCHAR,
+"field_discovery"."common_c2s_pkt_diff" VARCHAR,
+"field_discovery"."common_s2c_pkt_diff" VARCHAR,
+"field_discovery"."common_c2s_byte_diff" VARCHAR,
+"field_discovery"."common_s2c_byte_diff" VARCHAR,
+"field_discovery"."common_service" VARCHAR,
+"field_discovery"."common_schema_type" VARCHAR,
+"field_discovery"."common_vsys_id" VARCHAR,
+"field_discovery"."common_t_vsys_id" VARCHAR,
+"field_discovery"."common_flags" VARCHAR,
+"field_discovery"."common_flags_identify_info" VARCHAR,
+"field_discovery"."common_user_tags" VARCHAR,
+"field_discovery"."common_sub_action" VARCHAR,
+"field_discovery"."common_user_region" VARCHAR,
+"field_discovery"."common_shaping_rule_ids" VARCHAR,
+"field_discovery"."common_device_id" VARCHAR,
+"field_discovery"."common_egress_link_id" VARCHAR,
+"field_discovery"."common_ingress_link_id" VARCHAR,
+"field_discovery"."common_isp" VARCHAR,
+"field_discovery"."common_device_tag" VARCHAR,
+"field_discovery"."common_data_center" VARCHAR,
+"field_discovery"."common_device_group" VARCHAR,
+"field_discovery"."common_app_behavior" VARCHAR,
+"field_discovery"."common_encapsulation" VARCHAR,
+"field_discovery"."common_app_label" VARCHAR,
+"field_discovery"."common_tunnels" VARCHAR,
+"field_discovery"."common_protocol_label" VARCHAR,
+"field_discovery"."common_app_id" VARCHAR,
+"field_discovery"."common_app_full_path" VARCHAR,
+"field_discovery"."common_userdefine_app_name" VARCHAR,
+"field_discovery"."common_app_identify_info" VARCHAR,
+"field_discovery"."common_app_surrogate_id" VARCHAR,
+"field_discovery"."common_l7_protocol" VARCHAR,
+"field_discovery"."common_service_category" VARCHAR,
+"field_discovery"."common_start_time" VARCHAR,
+"field_discovery"."common_end_time" VARCHAR,
+"field_discovery"."common_establish_latency_ms" VARCHAR,
+"field_discovery"."common_con_duration_ms" VARCHAR,
+"field_discovery"."common_stream_dir" VARCHAR,
+"field_discovery"."common_address_list" VARCHAR,
+"field_discovery"."common_has_dup_traffic" VARCHAR,
+"field_discovery"."common_stream_error" VARCHAR,
+"field_discovery"."common_stream_trace_id" VARCHAR,
+"field_discovery"."common_link_info_c2s" VARCHAR,
+"field_discovery"."common_link_info_s2c" VARCHAR,
+"field_discovery"."common_packet_capture_file" VARCHAR,
+"field_discovery"."common_tunnel_endpoint_a_desc" VARCHAR,
+"field_discovery"."common_tunnel_endpoint_b_desc" VARCHAR,
+"field_discovery"."common_c2s_ipfrag_num" VARCHAR,
+"field_discovery"."common_s2c_ipfrag_num" VARCHAR,
+"field_discovery"."common_c2s_tcp_lostlen" VARCHAR,
+"field_discovery"."common_s2c_tcp_lostlen" VARCHAR,
+"field_discovery"."common_c2s_tcp_unorder_num" VARCHAR,
+"field_discovery"."common_s2c_tcp_unorder_num" VARCHAR,
+"field_discovery"."common_c2s_pkt_retrans" VARCHAR,
+"field_discovery"."common_s2c_pkt_retrans" VARCHAR,
+"field_discovery"."common_c2s_byte_retrans" VARCHAR,
+"field_discovery"."common_s2c_byte_retrans" VARCHAR,
+"field_discovery"."common_tcp_client_isn" VARCHAR,
+"field_discovery"."common_tcp_server_isn" VARCHAR,
+"field_discovery"."common_first_ttl" VARCHAR,
+"field_discovery"."common_processing_time" VARCHAR,
+"field_discovery"."common_ingestion_time" VARCHAR,
+"field_discovery"."common_mirrored_pkts" VARCHAR,
+"field_discovery"."common_mirrored_bytes" VARCHAR,
+"field_discovery"."http_url" VARCHAR,
+"field_discovery"."http_host" VARCHAR,
+"field_discovery"."http_domain" VARCHAR,
+"field_discovery"."http_request_line" VARCHAR,
+"field_discovery"."http_response_line" VARCHAR,
+"field_discovery"."http_request_header" VARCHAR,
+"field_discovery"."http_response_header" VARCHAR,
+"field_discovery"."http_request_content" VARCHAR,
+"field_discovery"."http_request_content_length" VARCHAR,
+"field_discovery"."http_request_content_type" VARCHAR,
+"field_discovery"."http_response_content" VARCHAR,
+"field_discovery"."http_response_content_length" VARCHAR,
+"field_discovery"."http_response_content_type" VARCHAR,
+"field_discovery"."http_request_body" VARCHAR,
+"field_discovery"."http_response_body" VARCHAR,
+"field_discovery"."http_request_body_key" VARCHAR,
+"field_discovery"."http_response_body_key" VARCHAR,
+"field_discovery"."http_proxy_flag" VARCHAR,
+"field_discovery"."http_sequence" VARCHAR,
+"field_discovery"."http_snapshot" VARCHAR,
+"field_discovery"."http_cookie" VARCHAR,
+"field_discovery"."http_referer" VARCHAR,
+"field_discovery"."http_user_agent" VARCHAR,
+"field_discovery"."http_content_length" VARCHAR,
+"field_discovery"."http_content_type" VARCHAR,
+"field_discovery"."http_set_cookie" VARCHAR,
+"field_discovery"."http_version" VARCHAR,
+"field_discovery"."http_response_latency_ms" VARCHAR,
+"field_discovery"."http_action_file_size" VARCHAR,
+"field_discovery"."http_session_duration_ms" VARCHAR,
+"field_discovery"."mail_protocol_type" VARCHAR,
+"field_discovery"."mail_account" VARCHAR,
+"field_discovery"."mail_from_cmd" VARCHAR,
+"field_discovery"."mail_to_cmd" VARCHAR,
+"field_discovery"."mail_from" VARCHAR,
+"field_discovery"."mail_to" VARCHAR,
+"field_discovery"."mail_cc" VARCHAR,
+"field_discovery"."mail_bcc" VARCHAR,
+"field_discovery"."mail_subject" VARCHAR,
+"field_discovery"."mail_subject_charset" VARCHAR,
+"field_discovery"."mail_content" VARCHAR,
+"field_discovery"."mail_content_charset" VARCHAR,
+"field_discovery"."mail_attachment_name" VARCHAR,
+"field_discovery"."mail_attachment_name_charset" VARCHAR,
+"field_discovery"."mail_attachment_content" VARCHAR,
+"field_discovery"."mail_eml_file" VARCHAR,
+"field_discovery"."mail_snapshot" VARCHAR,
+"field_discovery"."dns_message_id" VARCHAR,
+"field_discovery"."dns_qr" VARCHAR,
+"field_discovery"."dns_opcode" VARCHAR,
+"field_discovery"."dns_aa" VARCHAR,
+"field_discovery"."dns_tc" VARCHAR,
+"field_discovery"."dns_rd" VARCHAR,
+"field_discovery"."dns_ra" VARCHAR,
+"field_discovery"."dns_rcode" VARCHAR,
+"field_discovery"."dns_qdcount" VARCHAR,
+"field_discovery"."dns_ancount" VARCHAR,
+"field_discovery"."dns_nscount" VARCHAR,
+"field_discovery"."dns_arcount" VARCHAR,
+"field_discovery"."dns_qname" VARCHAR,
+"field_discovery"."dns_qtype" VARCHAR,
+"field_discovery"."dns_qclass" VARCHAR,
+"field_discovery"."dns_cname" VARCHAR,
+"field_discovery"."dns_sub" VARCHAR,
+"field_discovery"."dns_rr" VARCHAR,
+"field_discovery"."dns_response_latency_ms" VARCHAR,
+"field_discovery"."ssl_version" VARCHAR,
+"field_discovery"."ssl_sni" VARCHAR,
+"field_discovery"."ssl_san" VARCHAR,
+"field_discovery"."ssl_cn" VARCHAR,
+"field_discovery"."ssl_pinningst" VARCHAR,
+"field_discovery"."ssl_intercept_state" VARCHAR,
+"field_discovery"."ssl_passthrough_reason" VARCHAR,
+"field_discovery"."ssl_server_side_latency" VARCHAR,
+"field_discovery"."ssl_client_side_latency" VARCHAR,
+"field_discovery"."ssl_server_side_version" VARCHAR,
+"field_discovery"."ssl_client_side_version" VARCHAR,
+"field_discovery"."ssl_cert_verify" VARCHAR,
+"field_discovery"."ssl_error" VARCHAR,
+"field_discovery"."ssl_con_latency_ms" VARCHAR,
+"field_discovery"."ssl_ja3_fingerprint" VARCHAR,
+"field_discovery"."ssl_ja3_hash" VARCHAR,
+"field_discovery"."ssl_ja3s_fingerprint" VARCHAR,
+"field_discovery"."ssl_ja3s_hash" VARCHAR,
+"field_discovery"."ssl_cert_issuer" VARCHAR,
+"field_discovery"."ssl_cert_subject" VARCHAR,
+"field_discovery"."dtls_cookie" VARCHAR,
+"field_discovery"."dtls_version" VARCHAR,
+"field_discovery"."dtls_sni" VARCHAR,
+"field_discovery"."dtls_san" VARCHAR,
+"field_discovery"."dtls_cn" VARCHAR,
+"field_discovery"."dtls_con_latency_ms" VARCHAR,
+"field_discovery"."dtls_ja3_fingerprint" VARCHAR,
+"field_discovery"."dtls_ja3_hash" VARCHAR,
+"field_discovery"."dtls_cert_issuer" VARCHAR,
+"field_discovery"."dtls_cert_subject" VARCHAR,
+"field_discovery"."quic_version" VARCHAR,
+"field_discovery"."quic_sni" VARCHAR,
+"field_discovery"."quic_user_agent" VARCHAR,
+"field_discovery"."ftp_account" VARCHAR,
+"field_discovery"."ftp_url" VARCHAR,
+"field_discovery"."ftp_content" VARCHAR,
+"field_discovery"."ftp_link_type" VARCHAR,
+"field_discovery"."bgp_type" VARCHAR,
+"field_discovery"."bgp_as_num" VARCHAR,
+"field_discovery"."bgp_route" VARCHAR,
+"field_discovery"."voip_calling_account" VARCHAR,
+"field_discovery"."voip_called_account" VARCHAR,
+"field_discovery"."voip_calling_number" VARCHAR,
+"field_discovery"."voip_called_number" VARCHAR,
+"field_discovery"."streaming_media_url" VARCHAR,
+"field_discovery"."streaming_media_protocol" VARCHAR,
+"field_discovery"."app_extra_info" VARCHAR,
+"field_discovery"."sip_call_id" VARCHAR,
+"field_discovery"."sip_originator_description" VARCHAR,
+"field_discovery"."sip_responder_description" VARCHAR,
+"field_discovery"."sip_user_agent" VARCHAR,
+"field_discovery"."sip_server" VARCHAR,
+"field_discovery"."sip_originator_sdp_connect_ip" VARCHAR,
+"field_discovery"."sip_originator_sdp_media_port" VARCHAR,
+"field_discovery"."sip_originator_sdp_media_type" VARCHAR,
+"field_discovery"."sip_originator_sdp_content" VARCHAR,
+"field_discovery"."sip_responder_sdp_connect_ip" VARCHAR,
+"field_discovery"."sip_responder_sdp_media_port" VARCHAR,
+"field_discovery"."sip_responder_sdp_media_type" VARCHAR,
+"field_discovery"."sip_responder_sdp_content" VARCHAR,
+"field_discovery"."sip_duration_s" VARCHAR,
+"field_discovery"."sip_bye" VARCHAR,
+"field_discovery"."rtp_payload_type_c2s" VARCHAR,
+"field_discovery"."rtp_payload_type_s2c" VARCHAR,
+"field_discovery"."rtp_pcap_path" VARCHAR,
+"field_discovery"."rtp_originator_dir" VARCHAR,
+"field_discovery"."ssh_version" VARCHAR,
+"field_discovery"."ssh_auth_success" VARCHAR,
+"field_discovery"."ssh_client_version" VARCHAR,
+"field_discovery"."ssh_server_version" VARCHAR,
+"field_discovery"."ssh_cipher_alg" VARCHAR,
+"field_discovery"."ssh_mac_alg" VARCHAR,
+"field_discovery"."ssh_compression_alg" VARCHAR,
+"field_discovery"."ssh_kex_alg" VARCHAR,
+"field_discovery"."ssh_host_key_alg" VARCHAR,
+"field_discovery"."ssh_host_key" VARCHAR,
+"field_discovery"."ssh_hassh" VARCHAR,
+"field_discovery"."stratum_cryptocurrency" VARCHAR,
+"field_discovery"."stratum_mining_pools" VARCHAR,
+"field_discovery"."stratum_mining_program" VARCHAR,
+"field_discovery"."rdp_cookie" VARCHAR,
+"field_discovery"."rdp_security_protocol" VARCHAR,
+"field_discovery"."rdp_client_channels" VARCHAR,
+"field_discovery"."rdp_keyboard_layout" VARCHAR,
+"field_discovery"."rdp_client_version" VARCHAR,
+"field_discovery"."rdp_client_name" VARCHAR,
+"field_discovery"."rdp_client_product_id" VARCHAR,
+"field_discovery"."rdp_desktop_width" VARCHAR,
+"field_discovery"."rdp_desktop_height" VARCHAR,
+"field_discovery"."rdp_requested_color_depth" VARCHAR,
+"field_discovery"."rdp_certificate_type" VARCHAR,
+"field_discovery"."rdp_certificate_count" VARCHAR,
+"field_discovery"."rdp_certificate_permanent" VARCHAR,
+"field_discovery"."rdp_encryption_level" VARCHAR,
+"field_discovery"."rdp_encryption_method" VARCHAR,
+"field_discovery"."doh_url" VARCHAR,
+"field_discovery"."doh_host" VARCHAR,
+"field_discovery"."doh_request_line" VARCHAR,
+"field_discovery"."doh_response_line" VARCHAR,
+"field_discovery"."doh_cookie" VARCHAR,
+"field_discovery"."doh_referer" VARCHAR,
+"field_discovery"."doh_user_agent" VARCHAR,
+"field_discovery"."doh_content_length" VARCHAR,
+"field_discovery"."doh_content_type" VARCHAR,
+"field_discovery"."doh_set_cookie" VARCHAR,
+"field_discovery"."doh_version" VARCHAR,
+"field_discovery"."doh_message_id" VARCHAR,
+"field_discovery"."doh_qr" VARCHAR,
+"field_discovery"."doh_opcode" VARCHAR,
+"field_discovery"."doh_aa" VARCHAR,
+"field_discovery"."doh_tc" VARCHAR,
+"field_discovery"."doh_rd" VARCHAR,
+"field_discovery"."doh_ra" VARCHAR,
+"field_discovery"."doh_rcode" VARCHAR,
+"field_discovery"."doh_qdcount" VARCHAR,
+"field_discovery"."doh_ancount" VARCHAR,
+"field_discovery"."doh_nscount" VARCHAR,
+"field_discovery"."doh_arcount" VARCHAR,
+"field_discovery"."doh_qname" VARCHAR,
+"field_discovery"."doh_qtype" VARCHAR,
+"field_discovery"."doh_qclass" VARCHAR,
+"field_discovery"."doh_cname" VARCHAR,
+"field_discovery"."doh_sub" VARCHAR,
+"field_discovery"."doh_rr" VARCHAR,
+"field_discovery"."radius_packet_type" VARCHAR,
+"field_discovery"."radius_account" VARCHAR,
+"field_discovery"."radius_nas_ip" VARCHAR,
+"field_discovery"."radius_framed_ip" VARCHAR,
+"field_discovery"."radius_session_timeout" VARCHAR,
+"field_discovery"."radius_idle_timeout" VARCHAR,
+"field_discovery"."radius_acct_status_type" VARCHAR,
+"field_discovery"."radius_acct_terminate_cause" VARCHAR,
+"field_discovery"."radius_event_timestamp" VARCHAR,
+"field_discovery"."radius_service_type" VARCHAR,
+"field_discovery"."radius_nas_port" VARCHAR,
+"field_discovery"."radius_framed_protocol" VARCHAR,
+"field_discovery"."radius_callback_number" VARCHAR,
+"field_discovery"."radius_callback_id" VARCHAR,
+"field_discovery"."radius_termination_action" VARCHAR,
+"field_discovery"."radius_called_station_id" VARCHAR,
+"field_discovery"."radius_calling_station_id" VARCHAR,
+"field_discovery"."radius_acct_delay_time" VARCHAR,
+"field_discovery"."radius_acct_session_id" VARCHAR,
+"field_discovery"."radius_acct_multi_session_id" VARCHAR,
+"field_discovery"."radius_acct_input_octets" VARCHAR,
+"field_discovery"."radius_acct_output_octets" VARCHAR,
+"field_discovery"."radius_acct_input_packets" VARCHAR,
+"field_discovery"."radius_acct_output_packets" VARCHAR,
+"field_discovery"."radius_acct_session_time" VARCHAR,
+"field_discovery"."radius_acct_link_count" VARCHAR,
+"field_discovery"."radius_acct_interim_interval" VARCHAR,
+"field_discovery"."radius_acct_authentic" VARCHAR,
+"field_discovery"."gtp_version" VARCHAR,
+"field_discovery"."gtp_apn" VARCHAR,
+"field_discovery"."gtp_imei" VARCHAR,
+"field_discovery"."gtp_imsi" VARCHAR,
+"field_discovery"."gtp_phone_number" VARCHAR,
+"field_discovery"."gtp_uplink_teid" VARCHAR,
+"field_discovery"."gtp_downlink_teid" VARCHAR,
+"field_discovery"."gtp_msg_type" VARCHAR,
+"field_discovery"."gtp_end_user_ipv4" VARCHAR,
+"field_discovery"."gtp_end_user_ipv6" VARCHAR,
+"field_discovery"."start_time" VARCHAR,
+"field_discovery"."end_time" VARCHAR,
+"field_discovery"."log_id" VARCHAR,
+"field_discovery"."profile_id" VARCHAR,
+"field_discovery"."vsys_id" VARCHAR,
+"field_discovery"."attack_type" VARCHAR,
+"field_discovery"."severity" VARCHAR,
+"field_discovery"."conditions" VARCHAR,
+"field_discovery"."destination_ip" VARCHAR,
+"field_discovery"."destination_country" VARCHAR,
+"field_discovery"."source_ip_list" VARCHAR,
+"field_discovery"."source_country_list" VARCHAR,
+"field_discovery"."session_rate" VARCHAR,
+"field_discovery"."packet_rate" VARCHAR,
+"field_discovery"."bit_rate" VARCHAR);
+
+!quit
+
+EOF
+