From 6a6c69e80396f7f94a1bd87979773cbe8c955e15 Mon Sep 17 00:00:00 2001 From: igor04091968 Date: Thu, 4 Jun 2026 23:01:32 +0300 Subject: [PATCH] fix(portal): enable clickhouse security event aggregate --- adk-rust/crates/detmir-portal/src/main.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/adk-rust/crates/detmir-portal/src/main.rs b/adk-rust/crates/detmir-portal/src/main.rs index a764b84..2221b7a 100644 --- a/adk-rust/crates/detmir-portal/src/main.rs +++ b/adk-rust/crates/detmir-portal/src/main.rs @@ -2393,7 +2393,7 @@ SELECT toUInt64(countIf((positionCaseInsensitive(search, 'agent') > 0 OR positionCaseInsensitive(search, 'collector') > 0) AND (positionCaseInsensitive(search, 'error') > 0 OR positionCaseInsensitive(search, 'fail') > 0))) AS agent_errors_24h, nullIf(formatDateTime(max(ts), '%Y-%m-%dT%H:%i:%SZ'), '1970-01-01T00:00:00Z') AS last_event_utc FROM ( - SELECT ts, concat(event_type, ' ', severity, ' ', source, ' ', summary) AS search + SELECT ts, severity, concat(event_type, ' ', severity, ' ', source, ' ', summary) AS search FROM {database}.entity_timeline WHERE ts >= since )