异常行为检测设计

CREATE TABLE `ca_abnormal_user_rule_tmp` (

`k_id` int(11) NOT NULL AUTO_INCREMENT,

`model_id` int(11) NOT NULL,

`bizaccount` varchar(40) NOT NULL,

`src_ip` varchar(40) NOT NULL,

`client_software` varchar(40) NOT NULL,

`template_id` bigint(20) NOT NULL,

PRIMARY KEY (`k_id`),

KEY `bizaccount` (`bizaccount`),

KEY `src_ip` (`src_ip`),

KEY `client_software` (`client_software`),

KEY `template_id` (`template_id`)

) ENGINE=MyISAM DEFAULT CHARSET=utf8;

insert into ca_abnormal_user_rule_tmp (bizaccount, client_ip, client_software,template_id)

select bizaccount,client_ip,client_software,template_id from biao where server_ip fanwei

and server_port fanwei GROUP BY

bizaccount,client_ip,client_software,template_id;