登录日志分析常用查询

 -- 登陆总次数  每天  建议查最近一月      
select to_char(t.create_on, 'yyyy-mm-dd'),count(1) from base_login_log t 
 where t.create_on>to_date('2017-12-01 00:00:00','yyyy-mm-dd hh24:mi:ss')
 group by to_char(t.create_on, 'yyyy-mm-dd') 
 order by to_char(t.create_on, 'yyyy-mm-dd')    

-- 登陆总次数  每小时  建议查最近1天     
select to_char(t.create_on, 'yyyy-mm-dd hh24'),count(1) from base_login_log t 
 where t.create_on>to_date('2017-12-13 00:00:00','yyyy-mm-dd hh24:mi:ss')
 group by to_char(t.create_on, 'yyyy-mm-dd hh24') 
 order by to_char(t.create_on, 'yyyy-mm-dd hh24')   

 
 -- 登录成功  每小时  建议查最近1天     
select to_char(t.create_on, 'yyyy-mm-dd hh24'),count(1) from base_login_log t 
 where t.create_on>to_date('2017-12-13 00:00:00','yyyy-mm-dd hh24:mi:ss') and   t.login_status='用户登录' 
 group by to_char(t.create_on, 'yyyy-mm-dd hh24') 
 order by to_char(t.create_on, 'yyyy-mm-dd hh24') 

 

 -- 登录失败 每小时  建议查最近1天     
select to_char(t.create_on, 'yyyy-mm-dd hh24'),count(1) from base_login_log t 
 where t.create_on>to_date('2017-12-01 00:00:00','yyyy-mm-dd hh24:mi:ss') and   t.login_status<>'用户登录' 
 group by to_char(t.create_on, 'yyyy-mm-dd hh24') 
 order by to_char(t.create_on, 'yyyy-mm-dd hh24')   

 

 -- 统计MAC登录次数       
 select  mac_address,count(1) from base_login_log t where t.create_on>to_date('2017-12-13 00:00:00','yyyy-mm-dd hh24:mi:ss') and  mac_address is not null
group by mac_address order by count(1) desc