diff --git a/clear_up.py.template b/clear_up.py.template index 66d8b89..f3391f8 100644 --- a/clear_up.py.template +++ b/clear_up.py.template @@ -19,8 +19,11 @@ serverid = tuple((str(i) for i in df['serverid'].to_list())) sql = f"""select `#account_id`, `#event_time`, `#event_name`,`#os`,`svrindex`, count() as n from {db}.event where +`#event_time`>addDays(now('UTC'),-3) and ( lower(`#os`) = 'windows' or svrindex not in {serverid} + or svrindex is null ) + group by `#account_id`, `#event_time`, `#event_name`,`#os`,`svrindex` having n = 1 limit 2000"""