繁体   English   中英

SQL函数类似于xmlagg或listagg

[英]SQL function similar to xmlagg or listagg

SQl的新手,我编写了一个查询以从事件数据库中提取事件报告,其中基于事件槽信息将每个事件的数据存储在不同的表中。
下表是:

EVENT_D

ID     HOST       MESSAGE 
---------- ----------------- 
ID1    server1    Server Down
ID2    server2    File System Issue

EVENT_INFO

ID    RECEIVED_TIME          
---------- -------------
ID1   03-05-2019 12:09PM
ID2   03-06-2019 03:00AM

EVENT_OPERATIONS

ID     EG_TIME               EG_OPERATION 
---------- ------------------------------- 
ID1    03-05-2019 12:10 PM    Blacked Out
ID1    03-05-2019 12:10 PM    Reopened
ID1    03-05-2019 12:13 PM    Ownership Taken
ID1    03-05-2019 12:50 PM    Closed
ID2    03-06-2019 03:05 AM    Rule applied
ID2    03-06-2019 03:06 AM    Ownership Taken
ID2    03-06-2019 03:07 AM    Ticket triggered
ID2    03-06-2019 03:30 AM    Closed

预期产量:

ID     HOST       MESSAGE               RECEIVED_TIME           Operations
---------- ------------------------------------------------------------------------------------------------------------------------------------- 
ID1    server1    Server Down           03-05-2019 12:09PM      Blacked Out 03-05-2019 12:10 PM; Reopened 03-05-2019 12:10 PM; Ownership Taken 03-05-2019 12:13 PM; Closed 03-05-2019 12:50 PM
ID2    server2    File System Issue     03-06-2019 03:00AM      Rule applied 03-06-2019 03:05 AM; Ownership Taken 03-06-2019 03:06 AM; Ticket triggered 03-06-2019 03:07 AM; Closed 03-06-2019 03:30 AM

使用的查询:

  SELECT a.ID          AS Event_ID,
         a.HOST        AS Hostname,
         a.MESSAGE     AS EventMessage,
         b.RECEIVED_TIME AS EventReception,
         LISTAGG (
             c.EG_OPERATION || TO_CHAR (c.EG_TIME, 'YYYY-MM-DD hh12:mi:ss AM'),
             ';')
         WITHIN GROUP (ORDER BY c.EG_TIME) as Operations
    FROM EVENT_D a
         INNER JOIN EVENT_INFO b ON b.ID = a.ID
         INNER JOIN EVENT_OPERATIONS c ON c.ID = a.ID
   WHERE     b.RECEIVED_TIME >= TO_DATE ('2019-03-01', 'YYYY-MM-DD hh24:mi:ss')
         AND b.RECEIVED_TIME < TO_DATE ('2019-03-04', 'YYYY-MM-DD hh24:mi:ss')
GROUP BY a.ID,
         a.HOST,
         a.MESSAGE,
         b.RECEIVED_TIME

问题:

如果执行查询时未使用listagg / xmlagg函数和groupby表达式,则输出中的记录数每天约为6000(在实际情况下)。 但是由于在上述查询中使用了groupby表达式,因此事件计数中未命中。 事件按主机,消息和其他插槽分组,这反过来影响了计数。 在实际情况下,我们将获得约600条记录,而不是6000条记录。

问题:除了listagg / xmlagg之外,还有其他功能可以为我们提供预期格式的输出。

也许您希望LISTAGG()作为窗口函数:

SELECT . . .,
       LISTAGG (c.EG_OPERATION || TO_CHAR (c.EG_TIME, 'YYYY-MM-DD hh12:mi:ss AM'),
                ';'
               ) WITHIN GROUP (ORDER BY c.EG_TIME) OVER (PARTITION BY ID, HOST) as Operations

然后,您将删除GROUP BY

暂无
暂无

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM