Skip to content

Commit 4c48de8

Browse files
committed
Adding back ticks to mv query
Signed-off-by: Jialiang Liang <[email protected]>
1 parent f889008 commit 4c48de8

File tree

1 file changed

+19
-19
lines changed

1 file changed

+19
-19
lines changed

server/adaptors/integrations/__data__/repository/amazon_networkfirewall/assets/create_mv_aggregated-1.0.0.sql

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -26,26 +26,26 @@ SELECT
2626
FROM (
2727
SELECT
2828
CAST(event.timestamp AS TIMESTAMP) AS `@timestamp`,
29-
COALESCE(CAST(firewall_name AS STRING), 'UNKNOWN_FIREWALL') AS firewall_name,
30-
COALESCE(CAST(event.src_ip AS STRING), '0.0.0.0') AS event_src_ip,
31-
COALESCE(CAST(event.src_port AS INTEGER), -1) AS event_src_port,
32-
COALESCE(CAST(event.dest_ip AS STRING), '0.0.0.0') AS event_dest_ip,
33-
COALESCE(CAST(event.dest_port AS INTEGER), -1) AS event_dest_port,
34-
COALESCE(CAST(event.proto AS STRING), 'UNKNOWN_PROTO') AS event_proto,
35-
COALESCE(CAST(event.app_proto AS STRING), 'UNKNOWN_APP') AS event_app_proto,
36-
COALESCE(CAST(event.tcp.tcp_flags AS STRING), 'NONE') AS event_tcp_tcp_flags,
37-
COALESCE(CAST(event.tcp.syn AS BOOLEAN), false) AS event_tcp_syn,
38-
COALESCE(CAST(event.tcp.ack AS BOOLEAN), false) AS event_tcp_ack,
39-
COALESCE(CAST(event.alert.action AS STRING), 'UNKNOWN_ACTION') AS event_alert_action,
40-
COALESCE(CAST(event.alert.signature_id AS STRING), 'UNKNOWN_SIGID') AS event_alert_signature_id,
41-
COALESCE(CAST(event.alert.signature AS STRING), 'UNKNOWN_SIGNATURE') AS event_alert_signature,
42-
COALESCE(CAST(event.http.hostname AS STRING), 'UNKNOWN_HOST') AS event_http_hostname,
29+
COALESCE(CAST(firewall_name AS STRING), 'UNKNOWN_FIREWALL') AS `firewall_name`,
30+
COALESCE(CAST(event.src_ip AS STRING), '0.0.0.0') AS `event_src_ip`,
31+
COALESCE(CAST(event.src_port AS INTEGER), -1) AS `event_src_port`,
32+
COALESCE(CAST(event.dest_ip AS STRING), '0.0.0.0') AS `event_dest_ip`,
33+
COALESCE(CAST(event.dest_port AS INTEGER), -1) AS `event_dest_port`,
34+
COALESCE(CAST(event.proto AS STRING), 'UNKNOWN_PROTO') AS `event_proto`,
35+
COALESCE(CAST(event.app_proto AS STRING), 'UNKNOWN_APP') AS `event_app_proto`,
36+
COALESCE(CAST(event.tcp.tcp_flags AS STRING), 'NONE') AS `event_tcp_tcp_flags`,
37+
COALESCE(CAST(event.tcp.syn AS BOOLEAN), false) AS `event_tcp_syn`,
38+
COALESCE(CAST(event.tcp.ack AS BOOLEAN), false) AS `event_tcp_ack`,
39+
COALESCE(CAST(event.alert.action AS STRING), 'UNKNOWN_ACTION') AS `event_alert_action`,
40+
COALESCE(CAST(event.alert.signature_id AS STRING), 'UNKNOWN_SIGID') AS `event_alert_signature_id`,
41+
COALESCE(CAST(event.alert.signature AS STRING), 'UNKNOWN_SIGNATURE') AS `event_alert_signature`,
42+
COALESCE(CAST(event.http.hostname AS STRING), 'UNKNOWN_HOST') AS `event_http_hostname`,
4343
COALESCE(CAST(event.http.url AS STRING), '/') AS event_http_url,
44-
COALESCE(CAST(event.http.http_user_agent AS STRING), 'UNKNOWN_AGENT') AS event_http_http_user_agent,
45-
COALESCE(CAST(event.tls.sni AS STRING), 'UNKNOWN_SNI') AS event_tls_sni,
46-
COALESCE(CAST(event.netflow.pkts AS BIGINT), 0) AS event_netflow_pkts,
47-
COALESCE(CAST(event.netflow.bytes AS BIGINT), 0) AS event_netflow_bytes,
48-
COALESCE(CAST(event.netflow.age AS INTEGER), 0) AS event_netflow_age
44+
COALESCE(CAST(event.http.http_user_agent AS STRING), 'UNKNOWN_AGENT') AS `event_http_http_user_agent`,
45+
COALESCE(CAST(event.tls.sni AS STRING), 'UNKNOWN_SNI') AS `event_tls_sni`,
46+
COALESCE(CAST(event.netflow.pkts AS BIGINT), 0) AS `event_netflow_pkts`,
47+
COALESCE(CAST(event.netflow.bytes AS BIGINT), 0) AS `event_netflow_bytes`,
48+
COALESCE(CAST(event.netflow.age AS INTEGER), 0) AS `event_netflow_age`
4949
FROM
5050
{table_name}
5151
)

0 commit comments

Comments
 (0)