SELECT address AS "Nombre" , address AS "IP Origen" , COUNT(_ident) AS "Alertas" , ROUND( 100.0*COUNT(_ident)/130,5) AS "%" , MIN(time) AS "Desde" , MAX(time) AS "Hasta"
FROM
(
SELECT * FROM
(
SELECT CASE WHEN (t2.address is null or t2.address = ' ') then '127.0.0.1' else t2.address end as "address", tlast._ident, t0.time AT TIME ZONE 'GMT' AS "time"
FROM Prelude_Alert AS top
LEFT JOIN Prelude_DetectTime AS t0 ON (t0._message_ident =top._ident )
LEFT JOIN Prelude_Address AS t2 ON (t2._index = 0 AND t2._parent_type = 'S' AND t2._parent0_index = 0 AND t2._message_ident =top._ident )
LEFT JOIN Prelude_Impact AS t7 ON ((t7.severity = 'high') AND t7._message_ident =t2._message_ident )
LEFT JOIN Prelude_Alert AS tlast ON (tlast._ident =t7._message_ident AND tlast._ident BETWEEN 6481 AND 16239)
GROUP BY 1,2,3 ORDER BY tlast._ident DESC LIMIT 9758
) AS taux
EXCEPT
SELECT * FROM
(
SELECT CASE WHEN (t2.address is null or t2.address = ' ') then '127.0.0.1' else t2.address end as "address", tlast._ident, t0.time AT TIME ZONE 'GMT' AS "time"
FROM Prelude_Alert AS top
LEFT JOIN Prelude_DetectTime AS t0 ON (t0._message_ident =top._ident )
LEFT JOIN Prelude_Address AS t2 ON (t2._index = 0 AND t2._parent_type = 'S' AND t2._parent0_index = 0 AND t2._message_ident =top._ident )
LEFT JOIN Prelude_Impact AS t7 ON ((t7.severity = 'high') AND t7._message_ident =t2._message_ident )
LEFT JOIN Prelude_Alert AS tlast ON (tlast._ident =t7._message_ident AND tlast._ident BETWEEN 6481 AND 16239)
GROUP BY 1,2,3 ORDER BY tlast._ident DESC LIMIT 9758
) AS taux WHERE taux._ident IS NULL
) AS tlast
GROUP BY 1 ORDER BY 3 DESC LIMIT 25
e-REdING. Biblioteca de la Escuela Superior de Ingenieros de Sevilla.
