feat(1c): add file-based analytics stack scaffold

2026-05-21 23:34:55 +03:00
parent b420104f1f
commit 04b45ecf03
30 changed files with 1537 additions and 13 deletions
@@ -0,0 +1,66 @@
+-- Executive: sales today
+SELECT
+    toDate(ts) AS d,
+    sum(amount) AS sales_amount
+FROM analytics_1c.documents
+WHERE doc_type = 'Реализация'
+GROUP BY d
+ORDER BY d;
+
+-- Executive: overdue receivables
+SELECT
+    organization,
+    sum(amount) AS overdue_receivables
+FROM analytics_1c.documents
+WHERE status = 'overdue'
+GROUP BY organization
+ORDER BY overdue_receivables DESC;
+
+-- Operations: host health
+SELECT
+    ts,
+    host,
+    cpu_pct,
+    ram_pct,
+    disk_latency_ms,
+    disk_free_gb
+FROM analytics_1c.host_events
+ORDER BY ts DESC;
+
+-- Audit: after-hours activity
+SELECT
+    ts,
+    infobase,
+    user,
+    event_name,
+    message
+FROM analytics_1c.reglog_events
+WHERE event_name ILIKE '%login%'
+  AND toHour(ts) NOT BETWEEN 8 AND 20
+ORDER BY ts DESC;
+
+-- Detections: top rules
+SELECT
+    rule_title,
+    severity,
+    count() AS detections_total,
+    sum(score) AS score_total
+FROM analytics_1c.detections
+GROUP BY rule_title, severity
+ORDER BY detections_total DESC;
+
+-- Investigation: entity timeline
+SELECT
+    ts,
+    entity_type,
+    entity_id,
+    actor,
+    source,
+    event_type,
+    severity,
+    score,
+    summary
+FROM analytics_1c.entity_timeline
+WHERE entity_type = {entity_type:String}
+  AND entity_id = {entity_id:String}
+ORDER BY ts;