SQL state [HY000]; error code [1105]; Unexpected exception: errCode = 2, detailMessage = Failed to execute CTAS Reason: errCode = 2, detailMessage = Failed to create partition[view_model_relation_I5O8].Timeout:30 seconds. Unfinished: (backendId = 130977, tabletId = 519434602), (backendId = 130977, tabletId = 519434606); nested exception is java.sql.SQLException: Unexpected exception: errCode = 2, detailMessage = Failed to execute CTAS Reason: errCode = 2, detailMessage = Failed to create partition[view_model_relation_I5O8].Timeout:30 seconds. Unfinished: (backendId = 130977, tabletId = 519434602), (backendId = 130977, tabletId = 519434606)
版本：2.0.8
SQL：
CREATE table view_model.view_model_sql_MBBM PROPERTIES ("replication_num" = "1") AS select
detm,
daso,
sip,
dip,
srpo,
dspo,
alnm,
tpro,
apro,
ower,
id,
thle,
ifcs,
iscs,
kcst,
dreg,
dcity,
dnop,
dpro,
sreg,
scity,
snop,
spro,
iafa,
iafb,
enar,
star,
atrs,
imtm,
coun,
fitm,
deid,
latm,
smac,
dmac,
colv,
desc,
pld,
fxdm,
rela,
hrspbds,
url,
xff,
referer,
httpqqts,
rspb,
cnty,
arip,
osip,
sips,
isbk,
whls,
buta,
iadd,
stat,
sdtm,
scon,
CASE
when daso = 'xdr_source_alarm_07' OR daso= 'xdr_source_alarm_08' OR daso= 'xdr_source_flow_alarm' then CONCAT(
IF(url is not null and url <>'', CONCAT( '请求地址：', IFNULL(url,'')),''),
IF(httpqqts is not null and httpqqts <>'', CONCAT( '。HTTP请求体是:', IFNULL(httpqqts,'')),''),
IF(rspb is not null and rspb <>'', CONCAT( '。HTTP响应体是：', IFNULL(rspb,'')),''),
IF(pld is not null and pld <>'', CONCAT('。Payload是：', IFNULL(pld,'')),'')
)
when daso= 'xdr_source_alarm_03' then CONCAT('告警详细信息：', desc)
else '无需分析，你返回空即可'
END as msg
from
view_model.view_model_data_filter_IYPY
;
CREATE TABLE view_model_data_filter_IYPY (
detm datetime NULL COMMENT '发现时间',
daso varchar(50) NULL COMMENT '数据来源',
sip varchar(50) NULL COMMENT '源IP',
dip varchar(50) NULL COMMENT '目标IP',
srpo int(11) NULL COMMENT '源IPv4端口',
dspo int(11) NULL COMMENT '目的端口',
alnm varchar(200) NULL COMMENT '告警名称',
tpro varchar(50) NULL COMMENT '传输层协议',
apro varchar(50) NULL COMMENT '应用层协议',
ower varchar(255) NULL COMMENT '所属单位',
id varchar(50) NULL COMMENT '告警id',
thle varchar(10) NULL COMMENT '威胁等级',
ifcs varchar(50) NULL COMMENT '威胁大类',
iscs varchar(50) NULL COMMENT '威胁子类别',
kcst varchar(50) NULL COMMENT '攻击阶段',
dreg varchar(500) NULL COMMENT '目标地区',
dcity varchar(500) NULL COMMENT '目标城市',
dnop varchar(200) NULL COMMENT '目的端网络运营商',
dpro varchar(200) NULL COMMENT '目标省份',
sreg varchar(500) NULL COMMENT '源端地区',
scity varchar(50) NULL COMMENT '源端城市',
snop varchar(500) NULL COMMENT '源端运营商',
spro varchar(50) NULL COMMENT '源端省份',
iafa varchar(3) NULL COMMENT '源IP境内外标识',
iafb varchar(3) NULL COMMENT '目的IP境内外标识',
enar varchar(50) NULL COMMENT '国家编码',
star varchar(50) NULL COMMENT '国家编码',
atrs varchar(200) NULL COMMENT '攻击结果',
imtm datetime NULL DEFAULT CURRENT_TIMESTAMP COMMENT '入库时间',
coun bigint(20) NULL DEFAULT "0" COMMENT '发现次数',
fitm datetime NULL COMMENT '首次发现时间',
deid varchar(200) NULL,
latm datetime NULL DEFAULT CURRENT_TIMESTAMP COMMENT '末次发生时间',
smac varchar(20) NULL COMMENT '源主机Mac地址',
dmac varchar(20) NULL COMMENT '目的主机Mac地址',
colv tinyint(4) NULL COMMENT '威胁可信度',
desc text NULL COMMENT '威胁描述',
pld text NULL COMMENT '攻击/异常载荷',
fxdm varchar(100) NULL COMMENT '攻击方向',
rela text NULL COMMENT '攻击详细信息',
hrspbds text NULL COMMENT '攻击返回数据',
url text NULL COMMENT 'HTTP URL',
xff varchar(500) NULL COMMENT 'X-Forwarder-For',
referer varchar(500) NULL COMMENT 'HTTP Referer',
httpqqts text NULL COMMENT 'HTTP请求体',
rspb text NULL COMMENT 'HTTP响应体',
cnty varchar(100) NULL,
arip varchar(50) NULL COMMENT '攻击方IP',
osip varchar(50) NULL COMMENT '受害方IP',
sips varchar(50) NULL COMMENT '真实源IP',
isbk tinyint(4) NULL COMMENT '是否为黑IP访问',
whls tinyint(4) NULL COMMENT '是否白名单',
buta varchar(200) NULL COMMENT '访问的目标地址',
iadd varchar(200) NULL COMMENT 'IOC列表',
stat tinyint(4) NULL,
sdtm datetime NULL COMMENT '研判时间',
scon varchar(500) NULL COMMENT '研判描述'
) ENGINE=OLAP
DUPLICATE KEY(detm, daso)
COMMENT 'OLAP'
DISTRIBUTED BY HASH(detm) BUCKETS 10
PROPERTIES (
"replication_allocation" = "tag.location.default: 1",
"is_being_synced" = "false",
"storage_format" = "V2",
"light_schema_change" = "true",
"disable_auto_compaction" = "false",
"enable_single_replica_compaction" = "false"
);
