因此,以下数据的预期结果将是一个表,其中包含两个
device total
------ ----
345678 7
234567 3
> select * from incoming_events_by_device limit 50;
name: incoming_events_by_device
time device host metric_type sensor value
---- ------ ---- ----------- ------ -----
1535575550000000000 123456 foo.com counter efg 1
1535575550000000000 123456 foo.com counter efg 1
1535575550000000000 234567 foo.com counter efg 1
1535575550000000000 234567 foo.com counter hij 2
1535575550000000000 234567 foo.com counter efg 1
1535575550000000000 345678 foo.com counter nice 1
1535575550000000000 358168 foo.com counter nice 1
1535575550000000000 345678 foo.com counter nice 1
1535575550000000000 345678 foo.com counter nice 4
1535575550000000000 345678 foo.com counter efg 1
1535575550000000000 345678 foo.com counter efg 12
我尝试过这样使用子查询,但没有得到预期的结果。它显示空响应。
选择top(incoming\u devices\u count,5)FROM(选择sum(device)作为incoming\u devices\u count FROM incoming\u events\u by\u device WHERE sensor='nice'AND time>now()-30m group by device)