select date_trunc('hour',time) AT TIME ZONE 'GMT' AS "time", COUNT(total._ident) as "num" FROM (SELECT * FROM (
SELECT t6.name, tlast._ident FROM Prelude_Alert AS toplast
LEFT JOIN Prelude_Impact AS t7 ON (t7._message_ident = toplast._ident and t7.severity = 'high')
LEFT JOIN Prelude_Analyzer AS t6 ON (t6._message_ident = t7._message_ident and t6._parent_type = 'A' AND t6._index = -1 and t6.name = 'snort')
LEFT JOIN Prelude_Detecttime AS t0 ON (t0._message_ident = t6._message_ident)
LEFT JOIN Prelude_Alert AS tlast ON (tlast._ident = t0._message_ident and t0._message_ident BETWEEN 6481 AND 16239)
ORDER BY tlast._ident DESC LIMIT 9758
) AS TOT
except
SELECT * FROM (
SELECT t6.name, tlast._ident FROM Prelude_Alert AS toplast
LEFT JOIN Prelude_Impact AS t7 ON (t7._message_ident = toplast._ident and t7.severity = 'high')
LEFT JOIN Prelude_Analyzer AS t6 ON (t6._message_ident = t7._message_ident and t6._parent_type = 'A' AND t6._index = -1 and t6.name = 'snort')
LEFT JOIN Prelude_Detecttime AS t0 ON (t0._message_ident = t6._message_ident)
LEFT JOIN Prelude_Alert AS tlast ON (tlast._ident = t0._message_ident and t0._message_ident BETWEEN 6481 AND 16239)
ORDER BY tlast._ident DESC LIMIT 9758
) AS TOT
WHERE TOT._ident is null
) AS total
LEFT JOIN Prelude_Detecttime AS t0 ON (t0._message_ident = total._ident)
GROUP BY 1 ORDER BY 1
e-REdING. Biblioteca de la Escuela Superior de Ingenieros de Sevilla.
