#Fichero de comandos sql.
//1.-
  SELECT * FROM Prewikka_Version
//2.-
  SELECT name, version from _format
//3.-
  SELECT login FROM Prewikka_User
//4.-
  SELECT permission FROM Prewikka_Permission WHERE login = 'prewikka'
//5.-
  SELECT view, name, value FROM Prewikka_User_Configuration WHERE login = 'prewikka'
//6.-
  SELECT login FROM Prewikka_User WHERE login = 'admin'
//7.-
  SELECT password FROM Prewikka_User WHERE login = 'admin' AND password IS NOT NULL
//8.-
  SELECT login, time FROM Prewikka_Session WHERE sessionid = 'ccbd976b946b01bfb1d4c497ff639a66'
//9.-
  UPDATE Prewikka_Session SET time='2005-12-20 16:33:27' WHERE sessionid='ccbd976b946b01bfb1d4c497ff639a66'
//10.-
  SELECT permission FROM Prewikka_Permission WHERE login = 'prewikka'
//11.-
  SELECT view, name, value FROM Prewikka_User_Configuration WHERE login = 'prewikka'
//12.-
  DELETE FROM Prewikka_User_Configuration WHERE view = 'alert_listing' AND login = 'prewikka' AND name = 'filter'
//13.-
  SELECT name FROM Prewikka_Filter WHERE login = 'prewikka'
//14.- Calcula la tabla de el numero de alertas (agrupadas por direcciono origen y destino) y entra en un bucle con la primera fila.
  SELECT t0.address, t1.address, COUNT(t2.time), MAX(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Address AS t0 ON (t0._parent_type='S' AND t0._message_ident=top_table._ident AND t0._parent0_index = 0 AND t0._index = 0) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='T' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' GROUP BY 1, 2 ORDER BY 4 DESC

//15.- Calcula, para el primer par de origen-destino, el tiempo limite superior
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND t2.address = '127.0.0.1') OR (t1.address = '' AND t2.address = '127.0.0.1')) ORDER BY 1 ASC LIMIT 1
//16.- Límite inferior
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND t2.address = '127.0.0.1') OR (t1.address = '' AND t2.address = '127.0.0.1')) ORDER BY 1 DESC LIMIT 1

//17.- Identificador del evento q se produjo en el limite inferior.
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND t2.address = '127.0.0.1') OR (t1.address = '' AND t2.address = '127.0.0.1')) ORDER BY 2 DESC LIMIT 1
//18.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 192
//19.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 192
//20.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 192
//21.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 192
//22.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 192 AND _index != -1
//23.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 192 AND _index != -1
//24.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 0
//25.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 0
//26.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 0 AND _index != -1
//27.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 0 AND _index != -1
//28.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 1
//29.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 1
//30.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 1 AND _index != -1
//31.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 1 AND _index != -1
//32.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 2
//33.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 2 AND _index != -1
//34.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 2
//35.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 2 AND _index != -1
//36.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 192 AND _parent0_index = 2 AND _index != -1
//37.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 192
//38.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 192
//39.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 192
//40.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 192 AND _index != -1
//41.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'S' AND _message_ident = 192 AND _parent0_index = 0
//42.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'S' AND _message_ident = 192 AND _parent0_index = 0
//43.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'S' AND _message_ident = 192 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//44.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'S' AND _message_ident = 192 AND _parent0_index = 0
//45.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'S' AND _message_ident = 192 AND _parent0_index = 0
//46.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 192 AND _index != -1
//47.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0
//48.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0 AND _index != -1
//49.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0
//50.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//51.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0
//52.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0 AND _index != -1
//53.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0 AND _index != -1
//54.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 192 AND _parent0_index = 0
//55.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 192 AND _parent0_index = 0 AND _index != -1
//56.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 192
//57.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 192 AND _index != -1
//58.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 192 AND _index != -1
//59.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 192
//60.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 192
//61.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 192
//62.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND ((t3.address IS NULL AND t4.address = '127.0.0.1') OR (t3.address = '' AND t4.address = '127.0.0.1')) GROUP BY 1, 2
//63.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND ((t3.address IS NULL AND t4.address = '127.0.0.1') OR (t3.address = '' AND t4.address = '127.0.0.1')) GROUP BY 1, 2, 3
//64.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) LEFT JOIN Prelude_Classification AS t3 ON (t3._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t4 ON (t4._message_ident=top_table._ident) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND t2.address = '127.0.0.1' AND t3.text = 'Group Created' AND t4.severity = 'low' AND t4.completion = 'succeeded') OR (t1.address = '' AND t2.address = '127.0.0.1' AND t3.text = 'Group Created' AND t4.severity = 'low' AND t4.completion = 'succeeded')) ORDER BY 2 DESC LIMIT 1
//65.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = ' ' AND t2.address = '127.0.0.1' ORDER BY 1 ASC LIMIT 1
//66.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = ' ' AND t2.address = '127.0.0.1' ORDER BY 1 DESC LIMIT 1
//67.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = ' ' AND t2.address = '127.0.0.1' ORDER BY 2 DESC LIMIT 1
//68.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 191
//69.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 191
//70.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 191
//71.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 191
//72.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 191 AND _index != -1
//73.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 191 AND _index != -1
//74.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 0
//75.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 0
//76.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 0 AND _index != -1
//77.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 0 AND _index != -1
//78.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 1
//79.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 1
//80.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 1 AND _index != -1
//81.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 1 AND _index != -1
//82.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 2
//83.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 2 AND _index != -1
//84.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 2
//85.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 2 AND _index != -1
//86.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 191 AND _parent0_index = 2 AND _index != -1
//87.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 191
//88.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 191
//89.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 191
//90.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 191 AND _index != -1
//91.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'S' AND _message_ident = 191 AND _parent0_index = 0
//92.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'S' AND _message_ident = 191 AND _parent0_index = 0 AND _index != -1
//93.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'S' AND _message_ident = 191 AND _parent0_index = 0
//94.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'S' AND _message_ident = 191 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//95.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'S' AND _message_ident = 191 AND _parent0_index = 0
//96.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'S' AND _message_ident = 191 AND _parent0_index = 0
//97.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 191 AND _index != -1
//98.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0
//99.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0 AND _index != -1
//100.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0
//101.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//102.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0
//103.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0 AND _index != -1
//104.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0 AND _index != -1
//105.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 191 AND _parent0_index = 0
//106.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 191 AND _parent0_index = 0 AND _index != -1
//107.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 191
//108.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 191 AND _index != -1
//109.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 191 AND _index != -1
//110.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 191
//111.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 191
//112.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 191
//113.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = ' ' AND t4.address = '127.0.0.1' GROUP BY 1, 2
//114.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = ' ' AND t4.address = '127.0.0.1' GROUP BY 1, 2, 3
//115.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.61' AND t2.address = '127.0.0.1' ORDER BY 1 ASC LIMIT 1
//116.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.61' AND t2.address = '127.0.0.1' ORDER BY 1 DESC LIMIT 1
//117.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.61' AND t2.address = '127.0.0.1' ORDER BY 2 DESC LIMIT 1
//118.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 135
//119.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 135
//120.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 135
//121.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 135
//122.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 135 AND _index != -1
//123.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 135 AND _index != -1
//124.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 0
//125.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 0
//126.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 0 AND _index != -1
//127.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 0 AND _index != -1
//128.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 1
//129.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 1
//130.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 1 AND _index != -1
//131.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 1 AND _index != -1
//132.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 2
//133.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 2 AND _index != -1
//134.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 2
//135.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 2 AND _index != -1
//136.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 135 AND _parent0_index = 2 AND _index != -1
//137.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 135
//138.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 135
//139.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 135
//140.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 135 AND _index != -1
//141.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'S' AND _message_ident = 135 AND _parent0_index = 0
//142.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'S' AND _message_ident = 135 AND _parent0_index = 0 AND _index != -1
//143.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'S' AND _message_ident = 135 AND _parent0_index = 0
//144.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'S' AND _message_ident = 135 AND _parent0_index = 0
//145.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'S' AND _message_ident = 135 AND _parent0_index = 0
//146.-
  SELECT url, cgi, http_method FROM Prelude_WebService WHERE _parent_type = 'S' AND _message_ident = 135 AND _parent0_index = 0
//147.-
  SELECT snmp_oid, community, security_name, context_name, context_engine_id, command FROM Prelude_SnmpService WHERE _parent_type = 'S' AND _message_ident = 135 AND _parent0_index = 0
//148.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 135 AND _index != -1
//149.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0
//150.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0 AND _index != -1
//151.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0
//152.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//153.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0
//154.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0 AND _index != -1
//155.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0 AND _index != -1
//156.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0
//157.-
  SELECT url, cgi, http_method FROM Prelude_WebService WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0
//158.-
  SELECT snmp_oid, community, security_name, context_name, context_engine_id, command FROM Prelude_SnmpService WHERE _parent_type = 'T' AND _message_ident = 135 AND _parent0_index = 0
//159.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 135 AND _parent0_index = 0 AND _index != -1
//160.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 135
//161.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 135 AND _index != -1
//162.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 135 AND _index != -1
//163.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 135
//164.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 135
//165.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 135
//166.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = '192.168.100.61' AND t4.address = '127.0.0.1' GROUP BY 1, 2
//167.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = '192.168.100.61' AND t4.address = '127.0.0.1' GROUP BY 1, 2, 3
//168.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) LEFT JOIN Prelude_Classification AS t3 ON (t3._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t4 ON (t4._message_ident=top_table._ident) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.61' AND t2.address = '127.0.0.1' AND t3.text = 'User login successful' AND t4.severity = 'low' AND t4.completion = 'succeeded' ORDER BY 2 DESC LIMIT 1
//169.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) LEFT JOIN Prelude_Classification AS t3 ON (t3._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t4 ON (t4._message_ident=top_table._ident) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.61' AND t2.address = '127.0.0.1' AND t3.text = 'Admin login successful' AND t4.severity = 'low' AND t4.completion = 'succeeded' ORDER BY 2 DESC LIMIT 1
//170.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = 'elmo ' AND t2.address = '127.0.0.1' ORDER BY 1 ASC LIMIT 1
//171.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = 'elmo ' AND t2.address = '127.0.0.1' ORDER BY 1 DESC LIMIT 1
//172.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = 'elmo ' AND t2.address = '127.0.0.1' ORDER BY 2 DESC LIMIT 1
//173.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 133
//174.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 133
//175.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 133
//176.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 133
//177.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 133 AND _index != -1
//178.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 133 AND _index != -1
//179.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 0
//180.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 0
//181.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 0 AND _index != -1
//182.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 0 AND _index != -1
//183.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 1
//184.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 1
//185.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 1 AND _index != -1
//186.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 1 AND _index != -1
//187.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 2
//188.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 2 AND _index != -1
//189.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 2
//190.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 2 AND _index != -1
//191.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 133 AND _parent0_index = 2 AND _index != -1
//192.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 133
//193.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 133
//194.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 133
//195.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 133 AND _index != -1
//196.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'S' AND _message_ident = 133 AND _parent0_index = 0
//197.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'S' AND _message_ident = 133 AND _parent0_index = 0 AND _index != -1
//198.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'S' AND _message_ident = 133 AND _parent0_index = 0
//199.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'S' AND _message_ident = 133 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//200.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'S' AND _message_ident = 133 AND _parent0_index = 0
//201.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'S' AND _message_ident = 133 AND _parent0_index = 0
//202.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 133 AND _index != -1
//203.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0
//204.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0 AND _index != -1
//205.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0
//206.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//207.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0
//208.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0 AND _index != -1
//209.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0 AND _index != -1
//210.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 133 AND _parent0_index = 0
//211.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 133 AND _parent0_index = 0 AND _index != -1
//212.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 133
//213.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 133 AND _index != -1
//214.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 133 AND _index != -1
//215.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 133
//216.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 133
//217.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 133
//218.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = 'elmo ' AND t4.address = '127.0.0.1' GROUP BY 1, 2
//219.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = 'elmo ' AND t4.address = '127.0.0.1' GROUP BY 1, 2, 3
//220.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) LEFT JOIN Prelude_Classification AS t3 ON (t3._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t4 ON (t4._message_ident=top_table._ident) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = 'elmo ' AND t2.address = '127.0.0.1' AND t3.text = 'User authentication failed' AND t4.severity = 'high' AND t4.completion = 'failed' ORDER BY 2 DESC LIMIT 1
//221.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.60' AND t2.address = '127.0.0.1' ORDER BY 1 ASC LIMIT 1
//222.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.60' AND t2.address = '127.0.0.1' ORDER BY 1 DESC LIMIT 1
//223.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.60' AND t2.address = '127.0.0.1' ORDER BY 2 DESC LIMIT 1
//224.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 105
//225.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 105
//226.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 105
//227.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 105
//228.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 105 AND _index != -1
//229.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 105 AND _index != -1
//230.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 0
//231.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 0
//232.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 0 AND _index != -1
//233.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 0 AND _index != -1
//234.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 1
//235.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 1
//236.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 1 AND _index != -1
//237.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 1 AND _index != -1
//238.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 2
//239.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 2 AND _index != -1
//240.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 2
//241.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 2 AND _index != -1
//242.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 105 AND _parent0_index = 2 AND _index != -1
//243.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 105
//244.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 105
//245.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 105
//246.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 105 AND _index != -1
//247.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'S' AND _message_ident = 105 AND _parent0_index = 0
//248.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'S' AND _message_ident = 105 AND _parent0_index = 0 AND _index != -1
//249.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'S' AND _message_ident = 105 AND _parent0_index = 0
//250.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'S' AND _message_ident = 105 AND _parent0_index = 0
//251.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'S' AND _message_ident = 105 AND _parent0_index = 0
//252.-
  SELECT url, cgi, http_method FROM Prelude_WebService WHERE _parent_type = 'S' AND _message_ident = 105 AND _parent0_index = 0
//253.-
  SELECT snmp_oid, community, security_name, context_name, context_engine_id, command FROM Prelude_SnmpService WHERE _parent_type = 'S' AND _message_ident = 105 AND _parent0_index = 0
//254.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 105 AND _index != -1
//255.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0
//256.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0 AND _index != -1
//257.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0
//258.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//259.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0
//260.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0 AND _index != -1
//261.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0 AND _index != -1
//262.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0
//263.-
  SELECT url, cgi, http_method FROM Prelude_WebService WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0
//264.-
  SELECT snmp_oid, community, security_name, context_name, context_engine_id, command FROM Prelude_SnmpService WHERE _parent_type = 'T' AND _message_ident = 105 AND _parent0_index = 0
//265.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 105 AND _parent0_index = 0 AND _index != -1
//266.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 105
//267.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 105 AND _index != -1
//268.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 105 AND _index != -1
//269.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 105
//270.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 105
//271.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 105
//272.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = '192.168.100.60' AND t4.address = '127.0.0.1' GROUP BY 1, 2
//273.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = '192.168.100.60' AND t4.address = '127.0.0.1' GROUP BY 1, 2, 3
//274.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) LEFT JOIN Prelude_Classification AS t3 ON (t3._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t4 ON (t4._message_ident=top_table._ident) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.60' AND t2.address = '127.0.0.1' AND t3.text = 'User login successful' AND t4.severity = 'low' AND t4.completion = 'succeeded' ORDER BY 2 DESC LIMIT 1
//275.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.72 ' AND t2.address = '127.0.0.1' ORDER BY 1 ASC LIMIT 1
//276.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.72 ' AND t2.address = '127.0.0.1' ORDER BY 1 DESC LIMIT 1
//277.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.72 ' AND t2.address = '127.0.0.1' ORDER BY 2 DESC LIMIT 1
//278.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 37
//279.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 37
//280.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 37
//281.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 37
//282.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 37 AND _index != -1
//283.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 37 AND _index != -1
//284.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 0
//285.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 0
//286.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 0 AND _index != -1
//287.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 0 AND _index != -1
//288.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 1
//289.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 1
//290.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 1 AND _index != -1
//291.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 1 AND _index != -1
//292.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 2
//293.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 2 AND _index != -1
//294.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 2
//295.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 2 AND _index != -1
//296.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 37 AND _parent0_index = 2 AND _index != -1
//297.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 37
//298.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 37
//299.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 37
//300.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 37 AND _index != -1
//301.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'S' AND _message_ident = 37 AND _parent0_index = 0
//302.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'S' AND _message_ident = 37 AND _parent0_index = 0 AND _index != -1
//303.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'S' AND _message_ident = 37 AND _parent0_index = 0
//304.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'S' AND _message_ident = 37 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//305.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'S' AND _message_ident = 37 AND _parent0_index = 0
//306.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'S' AND _message_ident = 37 AND _parent0_index = 0
//307.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 37 AND _index != -1
//308.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0
//309.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0 AND _index != -1
//310.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0
//311.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//312.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0
//313.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0 AND _index != -1
//314.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0 AND _index != -1
//315.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 37 AND _parent0_index = 0
//316.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 37 AND _parent0_index = 0 AND _index != -1
//317.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 37
//318.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 37 AND _index != -1
//319.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 37 AND _index != -1
//320.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 37
//321.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 37
//322.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 37
//323.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = '192.168.100.72 ' AND t4.address = '127.0.0.1' GROUP BY 1, 2
//324.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND t3.address = '192.168.100.72 ' AND t4.address = '127.0.0.1' GROUP BY 1, 2, 3
//325.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) LEFT JOIN Prelude_Classification AS t3 ON (t3._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t4 ON (t4._message_ident=top_table._ident) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND t1.address = '192.168.100.72 ' AND t2.address = '127.0.0.1' AND t3.text = 'User authentication failed' AND t4.severity = 'high' AND t4.completion = 'failed' ORDER BY 2 DESC LIMIT 1
//326.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND t2.address = '192.168.100.72') OR (t1.address = '' AND t2.address = '192.168.100.72')) ORDER BY 1 ASC LIMIT 1
//327.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND t2.address = '192.168.100.72') OR (t1.address = '' AND t2.address = '192.168.100.72')) ORDER BY 1 DESC LIMIT 1
//328.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND t2.address = '192.168.100.72') OR (t1.address = '' AND t2.address = '192.168.100.72')) ORDER BY 2 DESC LIMIT 1
//329.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 34
//330.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 34
//331.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 34
//332.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 34
//333.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 34 AND _index != -1
//334.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 34 AND _index != -1
//335.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 0
//336.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 0
//337.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 0 AND _index != -1
//338.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 0 AND _index != -1
//339.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 1
//340.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 1
//341.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 1 AND _index != -1
//342.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 1 AND _index != -1
//343.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 2
//344.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 2 AND _index != -1
//345.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 2
//346.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 2 AND _index != -1
//347.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 34 AND _parent0_index = 2 AND _index != -1
//348.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 34
//349.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 34
//350.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 34
//351.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 34 AND _index != -1
//352.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'S' AND _message_ident = 34 AND _parent0_index = 0
//353.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'S' AND _message_ident = 34 AND _parent0_index = 0
//354.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'S' AND _message_ident = 34 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//355.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'S' AND _message_ident = 34 AND _parent0_index = 0
//356.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'S' AND _message_ident = 34 AND _parent0_index = 0
//357.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 34 AND _index != -1
//358.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0
//359.-
  SELECT ident, category, vlan_name, vlan_num, address, netmask FROM Prelude_Address WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0 AND _index != -1
//360.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0
//361.-
  SELECT ident, type, name, number, tty FROM Prelude_UserId WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0 AND _parent1_index = 0 AND _parent2_index = 0 AND _index != -1
//362.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0
//363.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0 AND _index != -1
//364.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0 AND _index != -1
//365.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 34 AND _parent0_index = 0
//366.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 34 AND _parent0_index = 0 AND _index != -1
//367.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 34
//368.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 34 AND _index != -1
//369.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 34 AND _index != -1
//370.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 34
//371.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 34
//372.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 34
//373.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND ((t3.address IS NULL AND t4.address = '192.168.100.72') OR (t3.address = '' AND t4.address = '192.168.100.72')) GROUP BY 1, 2
//374.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND ((t3.address IS NULL AND t4.address = '192.168.100.72') OR (t3.address = '' AND t4.address = '192.168.100.72')) GROUP BY 1, 2, 3
//375.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND ((t2.address IS NULL) OR (t2.address = ''))) OR (t1.address = '' AND ((t2.address IS NULL) OR (t2.address = '')))) ORDER BY 1 ASC LIMIT 1
//376.-
  SELECT t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND ((t2.address IS NULL) OR (t2.address = ''))) OR (t1.address = '' AND ((t2.address IS NULL) OR (t2.address = '')))) ORDER BY 1 DESC LIMIT 1
//377.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND ((t2.address IS NULL) OR (t2.address = ''))) OR (t1.address = '' AND ((t2.address IS NULL) OR (t2.address = '')))) ORDER BY 2 DESC LIMIT 1
//378.-
  SELECT messageid FROM Prelude_Alert WHERE _ident = 23
//379.-
  SELECT _message_ident FROM Prelude_Assessment WHERE _message_ident = 23
//380.-
  SELECT severity, completion, type, description FROM Prelude_Impact WHERE _message_ident = 23
//381.-
  SELECT rating, confidence FROM Prelude_Confidence WHERE _message_ident = 23
//382.-
  SELECT category, description FROM Prelude_Action WHERE _message_ident = 23 AND _index != -1
//383.-
  SELECT analyzerid, name, manufacturer, model, version, class, ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'A' AND _message_ident = 23 AND _index != -1
//384.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 0
//385.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 0
//386.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 0 AND _index != -1
//387.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 0 AND _index != -1
//388.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 1
//389.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 1
//390.-
  SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 1 AND _index != -1
//391.-
  SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'A' AND _message_ident = 23 AND _parent0_index = 1 AND _index != -1
//392.-
  SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE _parent_type = 'A' AND _message_ident = 23
//393.-
  SELECT time, gmtoff, usec FROM Prelude_DetectTime WHERE _message_ident = 23
//394.-
  SELECT time, gmtoff, usec FROM Prelude_AnalyzerTime WHERE _parent_type = 'A' AND _message_ident = 23
//395.-
  SELECT ident, spoofed, interface FROM Prelude_Source WHERE _message_ident = 23 AND _index != -1
//396.-
  SELECT ident, decoy, interface FROM Prelude_Target WHERE _message_ident = 23 AND _index != -1
//397.-
  SELECT ident, category, location, name FROM Prelude_Node WHERE _parent_type = 'T' AND _message_ident = 23 AND _parent0_index = 0
//398.-
  SELECT ident, category FROM Prelude_User WHERE _parent_type = 'T' AND _message_ident = 23 AND _parent0_index = 0
//399.-
  SELECT ident, name, pid, path FROM Prelude_Process WHERE _parent_type = 'T' AND _message_ident = 23 AND _parent0_index = 0
//400.-
  SELECT ident, name, port, iana_protocol_number, iana_protocol_name, portlist, protocol FROM Prelude_Service WHERE _parent_type = 'T' AND _message_ident = 23 AND _parent0_index = 0
//401.-
  SELECT ident, category, name, path, create_time, create_time_gmtoff, modify_time, modify_time_gmtoff, access_time, access_time_gmtoff, data_size, disk_size, fstype, file_type FROM Prelude_File WHERE _message_ident = 23 AND _parent0_index = 0 AND _index != -1
//402.-
  SELECT COUNT(*) FROM Prelude_FileAccess WHERE _message_ident = 23 AND _parent0_index = 0 AND _parent1_index = 0 AND _index != -1
//403.-
  SELECT category, name, path FROM Prelude_Linkage WHERE _message_ident = 23 AND _parent0_index = 0 AND _parent1_index = 0 AND _index != -1
//404.-
  SELECT change_time, change_time_gmtoff, number, major_device, minor_device, c_major_device, c_minor_device FROM Prelude_Inode WHERE _message_ident = 23 AND _parent0_index = 0 AND _parent1_index = 0
//405.-
  SELECT value, checksum_key, algorithm FROM Prelude_Checksum WHERE _message_ident = 23 AND _parent0_index = 0 AND _parent1_index = 0 AND _index != -1
//406.-
  SELECT ident, text FROM Prelude_Classification WHERE _message_ident = 23
//407.-
  SELECT origin, name, url, meaning FROM Prelude_Reference WHERE _message_ident = 23 AND _index != -1
//408.-
  SELECT type, meaning, data FROM Prelude_AdditionalData WHERE _parent_type = 'A' AND _message_ident = 23 AND _index != -1
//409.-
  SELECT name, command FROM Prelude_ToolAlert WHERE _message_ident = 23
//410.-
  SELECT name FROM Prelude_CorrelationAlert WHERE _message_ident = 23
//411.-
  SELECT program, size, buffer FROM Prelude_OverflowAlert WHERE _message_ident = 23
//412.-
  SELECT t0.name, t1.name FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident AND t0._index = -1) LEFT JOIN Prelude_Node AS t1 ON (t1._parent_type='A' AND t1._message_ident=top_table._ident AND t1._parent0_index = -1) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND ((t3.address IS NULL AND ((t4.address IS NULL) OR (t4.address = ''))) OR (t3.address = '' AND ((t4.address IS NULL) OR (t4.address = '')))) GROUP BY 1, 2
//413.-
  SELECT t0.text, t1.severity, t1.completion, COUNT(t2.time) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON (t0._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t1 ON (t1._message_ident=top_table._ident) LEFT JOIN Prelude_CreateTime AS t2 ON (t2._parent_type='A' AND t2._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type='S' AND t3._message_ident=top_table._ident AND t3._parent0_index = 0 AND t3._index = 0) LEFT JOIN Prelude_Address AS t4 ON (t4._parent_type='T' AND t4._message_ident=top_table._ident AND t4._parent0_index = 0 AND t4._index = 0) WHERE t2.time >= '2005-11-30 23:00:00' AND t2.time < '2005-12-20 23:00:00' AND ((t3.address IS NULL AND ((t4.address IS NULL) OR (t4.address = ''))) OR (t3.address = '' AND ((t4.address IS NULL) OR (t4.address = '')))) GROUP BY 1, 2, 3
//414.-
  SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec FROM Prelude_Alert AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON (t0._parent_type='A' AND t0._message_ident=top_table._ident) LEFT JOIN Prelude_Address AS t1 ON (t1._parent_type='S' AND t1._message_ident=top_table._ident AND t1._parent0_index = 0 AND t1._index = 0) LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type='T' AND t2._message_ident=top_table._ident AND t2._parent0_index = 0 AND t2._index = 0) LEFT JOIN Prelude_Classification AS t3 ON (t3._message_ident=top_table._ident) LEFT JOIN Prelude_Impact AS t4 ON (t4._message_ident=top_table._ident) WHERE t0.time >= '2005-11-30 23:00:00' AND t0.time < '2005-12-20 23:00:00' AND ((t1.address IS NULL AND ((t2.address IS NULL AND t3.text = 'Logfile inconsistency' AND t4.severity = 'high' AND t4.completion = 'succeeded') OR (t2.address = '' AND t3.text = 'Logfile inconsistency' AND t4.severity = 'high' AND t4.completion = 'succeeded'))) OR (t1.address = '' AND ((t2.address IS NULL AND t3.text = 'Logfile inconsistency' AND t4.severity = 'high' AND t4.completion = 'succeeded') OR (t2.address = '' AND t3.text = 'Logfile inconsistency' AND t4.severity = 'high' AND t4.completion = 'succeeded')))) ORDER BY 2 DESC LIMIT 1
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="es">
	<head>
            <title>e-REdING. Biblioteca de la Escuela Superior de Ingenieros de Sevilla.</title>

                <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta name="description" content="Buscador de proyectos ETSI" />
<meta name="author" content="Daniel Callejo"/>
<meta name="author" content="Federico L&oacute;pez"/>
<meta name="author" content="Juli&aacute;n P&eacute;rez"/>
<meta name="author" content="Jos&eacute; Mar&iacute;a Vidal Vidal"/>
<base href="https://biblus.us.es/bibing/proyectos/" /><link rel="shortcut icon" href="./favicon.ico" />
<link rel="stylesheet" href="./publico/css/estructura.css" type="text/css" />
<link rel="stylesheet" href="./publico/css/bootstrap.css" type="text/css" media="screen"/>
<link rel="stylesheet" href="./publico/css/enlaces-capas.css" type="text/css"  />
<link rel="stylesheet" href="./publico/css/pestanas.css" type="text/css"  /> 
<link rel="stylesheet" href="./publico/css/formularios.css" type="text/css" />
<link rel="stylesheet" href="./publico/css/lightbox.css" type="text/css"  />
<link rel="stylesheet" href="./publico/css/autocompleter.css" type="text/css"  />
<link rel="stylesheet" href="./publico/css/resultados.css" type="text/css"  />
<link rel="stylesheet" href="./publico/css/milista.css" type="text/css"  />
<link rel="stylesheet" href="./publico/css/explorador.css" type="text/css"  />
<link rel="stylesheet" href="./publico/css/ultimos.css" type="text/css"  />
<link rel="stylesheet" href="./publico/css/contactar.css" type="text/css"  />
<!-- <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" /> -->
<script src="./publico/javascript/jquery-1.9.1.min.js" type="text/javascript"></script>
<script src="./publico/javascript/bootstrap.js" type="text/javascript"></script>

<script src="./publico/javascript/mootools-1.2.4-core.js" type="text/javascript"></script>
<script src="./publico/javascript/mootools-1-1.2.4.2-more.js" type="text/javascript"></script>
<script src="./publico/javascript/targetbl.js" type="text/javascript"></script>
<script src="./publico/javascript/mensajes.js" type="text/javascript"></script>
<script src="./publico/javascript/form.js" type="text/javascript"></script>
<script src="./publico/javascript/autocompleter/Observer.js" type="text/javascript"></script>
<script src="./publico/javascript/autocompleter/Autocompleter.js" type="text/javascript"></script>
<script src="./publico/javascript/autocompleter/Autocompleter.Request.js" type="text/javascript"></script>
<script src="./publico/javascript/domready.js" type="text/javascript"></script>

<!-- Google tag (gtag.js) -->
<script async src="https://www.googletagmanager.com/gtag/js?id=G-2HP38G406P"></script>
<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());

  gtag('config', 'G-2HP38G406P');
</script>



<script type="text/javascript">
function seleccionar_todo(){
   for (i=0;i<document.formulario_marcados.elements.length;i++)
      if(document.formulario_marcados.elements[i].type == "checkbox")
         document.formulario_marcados.elements[i].checked=1
}
function deseleccionar_todo(){
   for (i=0;i<document.formulario_marcados.elements.length;i++)
      if(document.formulario_marcados.elements[i].type == "checkbox")
         document.formulario_marcados.elements[i].checked=0
} 
</script>
	</head>
    <body style="min-width: 960px; background-color: #e2e2e2; height: 100%">	
		<a name="arriba"></a>
<div>
<div id="header">
    <table id="Tabla_01" height="105" border="0" cellpadding="0" cellspacing="0">
    <tr>
        <td>
            <img src="./publico/imagenes/cabecera/banner_new2_01.jpg" width="3" height="105" alt="">
        </td>
        <td>
            <img src="./publico/imagenes/cabecera/banner_new2_02.jpg" width="100" height="105" alt="">
        </td>
        <td width="100%" align="right"  style="min-width: 613px; background-repeat: no-repeat; background-position: top right; font-size: medium; font-weight: bold; color: white;">
            <table width="100%" height="105" border="0">
                <tr>
                    <td style=" vertical-align: top; width: 547px">
                        <!-- <a style="text-decoration: none" href="./"><img src="./publico/imagenes/cabecera/banner_new2_03.jpg"alt=""></a> -->
                        <a style="text-decoration: none" href="https://biblus.us.es/bibing/proyectos/"><img src="./publico/imagenes/cabecera/banner_new2_03.jpg"alt=""></a>
                     </td>
                     <td  background="./publico/imagenes/cabecera/banner_new2_04.jpg" style="background-repeat: no-repeat; background-color: #c6d4e8;"><br><br><br>
                         &nbsp;
                        </td>
                    </tr>
             </table>
        </td>
    </tr>
    <tr style="border-top: 1px solid #ffffff;">
        <td colspan="3" id="menu_sup" style="font-size: small; text-align: right; background-color: #9c1f2f; vertical-align: bottom">
                                     

                                <a href="https://biblus.us.es/bibing/proyectos/" class="enlace " style=" color: #ffffff">Inicio&nbsp;&nbsp;|</a>
                                <a href="https://biblus.us.es/bibing/proyectos/acerca/" style=" color: #ffffff" class="enlace ">&nbsp;&nbsp;Acerca de&nbsp;&nbsp;|</a>
                                
                                <a href="https://biblus.us.es/bibing/proyectos/contactar/" style=" color: #ffffff" class="enlace ">&nbsp;&nbsp;Contactar&nbsp;&nbsp;</a>
                         <!--       <a href="https://biblus.us.es/bibing/proyectos/ayuda/" style=" color: #ffffff" class="enlace  ">&nbsp;&nbsp;Ayuda&nbsp;&nbsp;|</a> -->
                                <!-- <form id="idioma" class=""  method="post" action="">
                                <div class="inline" style="color: white">
                                <input type="submit" class="tipo_letra " style=" color: #ffffff"name="idioma" value="Castellanossss" />&nbsp;&nbsp;
                                </div>	
                                </form> -->

                                </td>

    </tr>
    </table>
</div>
<br><br>
<div class="colmask rightmenu">
<div class="panel panel-default" style="margin:20px">
            <div class="panel-heading"><h4>DISEÑO DE UNA PLATAFORMA DE GESTIÓN Y MONITORIZACIÓN DE EVENTOS DE SEGURIDAD</h4><h5 style="color:grey"><span class="glyphicon glyphicon-user""></span> : <b>Galera Ruiz, Alejandro David</b><br><span class="glyphicon glyphicon-book""></span>  :<b> Ingenier&iacute;a Telecomunicación</b></h5></div><div class="panel-body"><div class="contenido_proyecto"><div class="titulo2_explorador">Contenido del proyecto:</div><div class="ruta"><a href="abreproy/11240">Directorio ra&iacute;z</a>&nbsp;&nbsp;>&nbsp;&nbsp;<a href="abreproy/11240/direccion/ComandosSQL%252F">ComandosSQL</a>&nbsp;&nbsp;>&nbsp;&nbsp;<a href="abreproy/11240/direccion/ComandosSQL%252FScript-Prewikka%252F">Script-Prewikka</a>&nbsp;&nbsp;>&nbsp;&nbsp;<a href="abreproy/11240/direccion/ComandosSQL%252FScript-Prewikka%252Fquery.sql%252F">query.sql</a></div><div class="listing"></div></div></div></div>
</div>
</div>

        
	</body>
 
 
<!-- Inicio Google Analytics -->
<!--
	<script type="text/javascript">
		var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
		document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
	</script>
	
	<script type="text/javascript">
		try {
		var pageTracker = _gat._getTracker("UA-7789620-1");
		pageTracker._trackPageview();
	} 
		catch(err) {}
	</script>
-->
<!-- Fin Google Analytics -->

</html>