nebula.init.data.sql

-- MySQL dump 10.16  Distrib 10.3.10-MariaDB, for debian-linux-gnu (x86_64)
--
-- Host: localhost    Database: asset
-- ------------------------------------------------------
-- Server version	10.3.10-MariaDB-1:10.3.10+maria~bionic

/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
/*!40101 SET NAMES utf8 */;
/*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
/*!40103 SET TIME_ZONE='+00:00' */;
/*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
/*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
/*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
/*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;
--
-- Current Database: `asset`
--

CREATE DATABASE /*!32312 IF NOT EXISTS*/ `asset` /*!40100 DEFAULT CHARACTER SET latin1 */;

USE `asset`;

--
-- Table structure for table `porter`
--

DROP TABLE IF EXISTS `porter`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `porter` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `name` char(40) NOT NULL,
  `remark` char(255) DEFAULT NULL,
  `count` int(11) DEFAULT NULL,
  `create_time` timestamp NOT NULL DEFAULT current_timestamp() COMMENT '创建时间',
  `modify_time` timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp() COMMENT '修改时间',
  `schema` char(40) DEFAULT NULL,
  `key` char(255) DEFAULT NULL,
  `status` tinyint(4) DEFAULT NULL COMMENT '0为无效,1为有效',
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `porter`
--

LOCK TABLES `porter` WRITE;
/*!40000 ALTER TABLE `porter` DISABLE KEYS */;
/*!40000 ALTER TABLE `porter` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `trunk`
--

DROP TABLE IF EXISTS `trunk`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `trunk` (
  `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
  `trunk` varchar(50) DEFAULT NULL COMMENT 'trunk url',
  `status` tinyint(4) DEFAULT NULL COMMENT '0为无效,1为有效',
  `create_time` timestamp NOT NULL DEFAULT current_timestamp() COMMENT '创建时间',
  `modify_time` timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp() COMMENT '修改时间',
  PRIMARY KEY (`id`),
  UNIQUE KEY `trunk_unique` (`trunk`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `trunk`
--

LOCK TABLES `trunk` WRITE;
/*!40000 ALTER TABLE `trunk` DISABLE KEYS */;
/*!40000 ALTER TABLE `trunk` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Current Database: `profile`
--

CREATE DATABASE /*!32312 IF NOT EXISTS*/ `profile` /*!40100 DEFAULT CHARACTER SET latin1 */;

USE `profile`;

--
-- Table structure for table `crawler_pages`
--

DROP TABLE IF EXISTS `crawler_pages`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `crawler_pages` (
  `page` varchar(200) NOT NULL DEFAULT '' COMMENT '页面',
  `day` int(10) NOT NULL COMMENT '天小时',
  `hour` tinyint(4) DEFAULT NULL,
  `page__crawler_request_amount__profile` int(11) NOT NULL DEFAULT 0 COMMENT '总请求量',
  `page__crawler_crawler_risk_amount__profile` int(11) NOT NULL DEFAULT 0 COMMENT '爬虫风险数',
  `page__crawler_upstream_size__profile` int(11) NOT NULL DEFAULT 0 COMMENT '上行数据量',
  `page__crawler_latency__profile` int(11) NOT NULL DEFAULT 0 COMMENT '延时',
  `page__crawler_status_2__profile` int(11) NOT NULL DEFAULT 0 COMMENT '成功',
  `page__crawler_status_3__profile` int(11) NOT NULL DEFAULT 0 COMMENT '重定向',
  `page__crawler_status_4__profile` int(11) NOT NULL DEFAULT 0 COMMENT '请求错误',
  `page__crawler_status_5__profile` int(11) NOT NULL DEFAULT 0 COMMENT '服务器错误',
  UNIQUE KEY `page_day_hour_unique_index` (`page`,`day`,`hour`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `crawler_pages`
--

LOCK TABLES `crawler_pages` WRITE;
/*!40000 ALTER TABLE `crawler_pages` DISABLE KEYS */;
/*!40000 ALTER TABLE `crawler_pages` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Current Database: `nebula`
--

CREATE DATABASE /*!32312 IF NOT EXISTS*/ `nebula` /*!40100 DEFAULT CHARACTER SET latin1 */;

USE `nebula`;

SET FOREIGN_KEY_CHECKS=0;

-- ----------------------------
-- Table structure for event_py
-- ----------------------------
DROP TABLE IF EXISTS `event_py`;
CREATE TABLE `event_py` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `py_name` varchar(32) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL COMMENT 'py',
  `py_content` text CHARACTER SET utf8 COLLATE utf8_bin NOT NULL COMMENT 'py',
  `py_version` varchar(32) DEFAULT NULL,
  `create_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
  `update_time` timestamp NULL DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP,
  `user` varchar(32) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=20 DEFAULT CHARSET=utf8;

-- ----------------------------
-- Records of event_py
-- ----------------------------
INSERT INTO `event_py` VALUES ('1', 'TRANSACTION_DEPOSIT', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('2', 'ACCOUNT_CERTIFICATION', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('3', 'ACCOUNT_LOGIN', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('4', 'ACCOUNT_REFERRALCODE_CREATE', 0x0A696D706F7274206A736F6E0A0A646566206576656E742870726F70657274696573293A0A2020202070726F70657274696573203D206A736F6E2E6C6F6164732870726F70657274696573290A20202020726573756C74203D205B5D0A202020207231203D206469637428290A2020202072315B2770726F70657274696573275D203D2070726F706572746965730A2020202072315B276576656E745F6E616D65275D203D20224143434F554E545F524546455252414C434F44455F435245415445220A2020202072315B276576656E745F726573756C74275D203D2046616C73650A20202020726573756C742E617070656E64287231290A2020202072657475726E206A736F6E2E64756D707328726573756C74290A20202020, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('5', 'HTTP_STATIC', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('6', 'HTTP_DYNAMIC', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('7', 'ACCOUNT_TOKEN_CHANGE', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('8', 'TRANSACTION_ESCROW', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('9', 'ORDER_SUBMIT', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('10', 'ACTIVITY_DO', 0x0A696D706F7274206A736F6E0A0A646566206576656E742870726F70657274696573293A0A2020202070726F70657274696573203D206A736F6E2E6C6F6164732870726F70657274696573290A20202020726573756C74203D205B5D0A202020207231203D206469637428290A2020202072315B2770726F70657274696573275D203D2070726F706572746965730A2020202072315B276576656E745F6E616D65275D203D202241435449564954595F444F220A2020202072315B276576656E745F726573756C74275D203D2046616C73650A20202020726573756C742E617070656E64287231290A2020202072657475726E206A736F6E2E64756D707328726573756C74290A20202020, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('11', 'ORDER_CANCEL', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('12', 'ACCOUNT_PW_CHANGE', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('13', 'ACCOUNT_REGISTRATION', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('14', 'TRANSACTION_WITHDRAW', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('15', 'HTTP_CLICK', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('16', 'HTTP_INCIDENT', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('17', 'TRANSACTION_BANKCRD_BIND', 0x0A696D706F7274206A736F6E0A0A646566206576656E742870726F70657274696573293A0A2020202070726F70657274696573203D206A736F6E2E6C6F6164732870726F70657274696573290A20202020726573756C74203D205B5D0A202020207231203D206469637428290A2020202072315B2770726F70657274696573275D203D2070726F706572746965730A2020202072315B276576656E745F6E616D65275D203D20225452414E53414354494F4E5F42414E4B4352445F42494E44220A2020202072315B276576656E745F726573756C74275D203D2046616C73650A20202020726573756C742E617070656E64287231290A2020202072657475726E206A736F6E2E64756D707328726573756C74290A20202020, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);
INSERT INTO `event_py` VALUES ('18', 'TRANSACTION_BANKCRD_UNBIND', 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, '1', '2019-01-23 16:27:57', '2019-01-23 16:27:57', null);



--
-- Table structure for table `config_cust`
--

DROP TABLE IF EXISTS `config_cust`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `config_cust` (
  `configkey` char(200) NOT NULL,
  `configvalue` blob DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`configkey`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `config_cust`
--

LOCK TABLES `config_cust` WRITE;
/*!40000 ALTER TABLE `config_cust` DISABLE KEYS */;
/*!40000 ALTER TABLE `config_cust` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `eventmeta`
--

DROP TABLE IF EXISTS `eventmeta`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `eventmeta` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `derived` int(11) DEFAULT NULL,
  `src_variableid` char(100) DEFAULT NULL,
  `properties` blob DEFAULT NULL,
  `expire` bigint(20) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `config` blob DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `eventmeta`
--

LOCK TABLES `eventmeta` WRITE;
/*!40000 ALTER TABLE `eventmeta` DISABLE KEYS */;
/*!40000 ALTER TABLE `eventmeta` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `eventmodel_cust`
--

DROP TABLE IF EXISTS `eventmodel_cust`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `eventmodel_cust` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `visible_name` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `source` varchar(1000) DEFAULT NULL,
  `version` char(100) DEFAULT NULL,
  `properties` varchar(8000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `eventmodel_cust`
--

LOCK TABLES `eventmodel_cust` WRITE;
/*!40000 ALTER TABLE `eventmodel_cust` DISABLE KEYS */;
/*!40000 ALTER TABLE `eventmodel_cust` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `follow_keyword`
--

DROP TABLE IF EXISTS `follow_keyword`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `follow_keyword` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `keyword` varchar(255) NOT NULL,
  `keyword_type` enum('page','uid','did','ip') DEFAULT NULL,
  `is_followed` tinyint(1) DEFAULT NULL,
  `is_ignored` tinyint(1) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`),
  KEY `keyword` (`keyword`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `follow_keyword`
--

LOCK TABLES `follow_keyword` WRITE;
/*!40000 ALTER TABLE `follow_keyword` DISABLE KEYS */;
/*!40000 ALTER TABLE `follow_keyword` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `group`
--

DROP TABLE IF EXISTS `group`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `group` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `name` char(100) DEFAULT NULL,
  `description` varchar(1000) DEFAULT NULL,
  `creator` int(11) DEFAULT NULL,
  `create_time` bigint(20) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `is_active` int(11) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `group`
--

LOCK TABLES `group` WRITE;
/*!40000 ALTER TABLE `group` DISABLE KEYS */;
INSERT INTO `group` VALUES (1,'超级管理员组','root',1,1480521600000,1480521600000,1),(2,'管理员组','manager',1,1480521600000,1480521600000,1),(3,'analyst_1','普通分析师组1',2,1480918266485,1480918407843,1),(4,'analyst_2','普通分析师组2',2,1480918301903,1480918303687,1);
/*!40000 ALTER TABLE `group` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `group_permission`
--

DROP TABLE IF EXISTS `group_permission`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `group_permission` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `group_id` int(11) DEFAULT NULL,
  `permission_id` int(11) DEFAULT NULL,
  `extra_settings` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=19 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `group_permission`
--

LOCK TABLES `group_permission` WRITE;
/*!40000 ALTER TABLE `group_permission` DISABLE KEYS */;
INSERT INTO `group_permission` VALUES (1,1,17,'[\"1\", \"7\"]',1480411421526),(2,1,12,'{\"be_blocked\": [], \"blocked\": []}',1480908606401),(3,2,17,'[\"1\", \"2\", \"3\", \"4\", \"5\", \"6\", \"8\", \"9\", \"10\"]',1480411528207),(4,2,12,'{\"be_blocked\": [6], \"blocked\": []}',1480918303782),(5,3,17,'[\"2\", \"3\", \"4\", \"5\", \"6\", \"8\", \"10\", \"7\", \"9\"]',1480918407867),(6,3,12,'{\"be_blocked\": [4, 6, 5, 7], \"blocked\": [4]}',1480918407893),(7,4,17,'[\"1\", \"2\", \"3\", \"4\", \"5\", \"6\", \"8\", \"10\", \"7\", \"9\"]',1480918303733),(8,4,12,'{\"be_blocked\": [5, 7, 3], \"blocked\": [3]}',1480918404951),(9,5,17,'[\"2\", \"3\", \"4\", \"5\", \"6\", \"8\", \"10\", \"7\", \"9\"]',1480480265801),(10,5,12,'{\"be_blocked\": [6, 7], \"blocked\": [6, 4, 3]}',1480918303823),(11,6,17,'[\"1\", \"2\", \"3\", \"4\", \"5\", \"6\", \"8\", \"10\", \"7\", \"9\"]',1480477687054),(12,6,12,'{\"be_blocked\": [5, 7], \"blocked\": [5, 3, 2]}',1480918270576),(13,7,17,'[\"\"]',1480908607555),(14,7,12,'{\"blocked\": [3, 4, 5, 6]}',1480908607574),(15,3,17,'[\"2\", \"3\", \"4\", \"5\", \"6\", \"8\", \"10\", \"7\", \"9\"]',1480918266531),(16,3,12,'{\"blocked\": []}',1480918266573),(17,4,17,'[\"2\", \"3\", \"4\", \"5\", \"6\", \"8\", \"10\", \"7\", \"9\"]',1480918301956),(18,4,12,'{\"blocked\": [3]}',1480918301998);
/*!40000 ALTER TABLE `group_permission` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `logparser`
--

DROP TABLE IF EXISTS `logparser`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `logparser` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `source` char(100) DEFAULT NULL,
  `dest` char(100) DEFAULT NULL,
  `terms` blob DEFAULT NULL,
  `host` char(100) DEFAULT NULL,
  `url` char(100) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `status` int(11) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `logparser`
--

LOCK TABLES `logparser` WRITE;
/*!40000 ALTER TABLE `logparser` DISABLE KEYS */;
/*!40000 ALTER TABLE `logparser` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `logquery`
--

DROP TABLE IF EXISTS `logquery`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `logquery` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `fromtime` bigint(20) DEFAULT NULL,
  `endtime` bigint(20) DEFAULT NULL,
  `status` enum('wait','process','success','failed') DEFAULT NULL,
  `remark` varchar(300) DEFAULT NULL,
  `error` varchar(200) DEFAULT NULL,
  `event_name` varchar(100) DEFAULT NULL,
  `download_path` char(100) DEFAULT NULL,
  `create_time` bigint(20) DEFAULT NULL,
  `terms` varchar(2000) DEFAULT NULL,
  `show_cols` varchar(2000) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `logquery`
--

LOCK TABLES `logquery` WRITE;
/*!40000 ALTER TABLE `logquery` DISABLE KEYS */;
/*!40000 ALTER TABLE `logquery` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `permission`
--

DROP TABLE IF EXISTS `permission`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `permission` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `codename` char(100) DEFAULT NULL,
  `app` char(100) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=18 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `permission`
--

LOCK TABLES `permission` WRITE;
/*!40000 ALTER TABLE `permission` DISABLE KEYS */;
INSERT INTO `permission` VALUES (1,'fetch_config','nebula','内部模块定期拉取配置、计算变量',1480411326019),(2,'view_user','nebula','获取用户列表。超级管理员能看到所有的用户，管理员能看到自己创建的组内的所有用户，普通用户没有权限',1480411326045),(3,'add_user','nebula','新增用户。此权限不向下继承，除非是由root创建管理员时，因为用户身份是管理员才会有该权限',1480411326068),(4,'edit_user','nebula','编辑当前用户的信息。\n',1480411326089),(5,'delete_user','nebula','删除用户。只能删除用户自己新建的用户，当被删用户当前还有创建过的用户则删除失败。',1480411326111),(6,'disable_user','nebula','block用户。超级管理员能block所有用户、管理员能block自己创建组内的所有用户',1480411326128),(7,'view_group','nebula','查看用户组信息，包括权限，不包括下属用户信息。',1480411326146),(8,'add_group','nebula','新增用户组。\n',1480411326171),(9,'delete_group','nebula','删除用户组。 当还有关联策略在上线状态时删除失败\n',1480411326192),(10,'add_group_permission','nebula','新增用户组权限。 只有超级管理员拥有该权限，管理员创建的用户组只能继承管理员所在用户组的权限，且不能新增、删除、修改用户组、用户。\n',1480411326212),(11,'delete_group_permission','nebula','新增用户组权限。 只有超级管理员拥有该权限',1480411326232),(12,'view_strategy','nebula','查看策略。 ',1480411326251),(13,'add_strategy','nebula','新增策略。 超级管理员没有。用户能新增自己所在组和自己所创建的组的策略',1480411326272),(14,'edit_strategy','nebula','修改策略。 超级管理员没有。用户能修改自己所在组和自己所创建的组的策略\n',1480411326291),(15,'delete_strategy','nebula','删除策略。 超级管理员没有。用户能删除自己所在组和自己所创建的组的策略\n',1480411326310),(16,'edit_strategy_weigh','nebula','修改策略权重。 只有当用户的身份是管理员、且拥有edit_strategy权限时，可以编辑自己所在组和创建的用户组所增加的策略的权重',1480411326333),(17,'view_privileges','nebula','用户组可以浏览的所有前端页面的编号列表',1480411326354);
/*!40000 ALTER TABLE `permission` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `rpcservice`
--

DROP TABLE IF EXISTS `rpcservice`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `rpcservice` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `request_app` char(100) DEFAULT NULL,
  `request_name` char(100) DEFAULT NULL,
  `response_app` char(100) DEFAULT NULL,
  `response_name` char(100) DEFAULT NULL,
  `oneway` int(11) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `rpcservice`
--

LOCK TABLES `rpcservice` WRITE;
/*!40000 ALTER TABLE `rpcservice` DISABLE KEYS */;
/*!40000 ALTER TABLE `rpcservice` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `session`
--

DROP TABLE IF EXISTS `session`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `session` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `user_name` char(100) DEFAULT NULL,
  `auth_code` char(100) DEFAULT NULL,
  `expire_time` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=14 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `session`
--

LOCK TABLES `session` WRITE;
/*!40000 ALTER TABLE `session` DISABLE KEYS */;
INSERT INTO `session` VALUES (1,'threathunter_test','e3df1bc720c40d0701c461aba7f63055',1543119171),(2,'threathunter_test','672e3bafd133b8515a5c624b52bcf9fa',1543119220),(3,'threathunter_test','edf0f6f1066526aecd7f5fc3665137b2',1543126784),(4,'threathunter_test','ec2cb0011aa02763c1244c275e89eaa9',1543126798),(5,'threathunter','9804c35482e1a7ed27ac71310db7aee7',1543126896),(6,'threathunter_test','d38b8ed85f78fa85b38cf71bfb7fbdcc',1543126926),(7,'threathunter_test','8b80e384a88218ef7ae215bc94a07efc',1543127156),(8,'threathunter_test','3056be857f03dde7543c54fc05d8318f',1543127517),(9,'threathunter_test','a5e9cbd11f6947f043cbbddeb45c27e8',1543128080),(10,'threathunter_test','a8cd223d182dfeb75017c4b6ad81397d',1543133533),(11,'threathunter_test','876eef0947d5b237b97a1fe9f81f7df6',1543134533),(12,'threathunter_test','565651ae7ae0977450b6be6c84d42f95',1543134547),(13,'threathunter_test','2e338265ebf0a718f8bb1a495bbcfc5e',1543480564);
/*!40000 ALTER TABLE `session` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `strategy_cust`
--

DROP TABLE IF EXISTS `strategy_cust`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `strategy_cust` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `version` char(100) DEFAULT NULL,
  `status` char(100) DEFAULT NULL,
  `createtime` bigint(20) DEFAULT NULL,
  `modifytime` bigint(20) DEFAULT NULL,
  `starteffect` bigint(20) DEFAULT NULL,
  `endeffect` bigint(20) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `config` blob DEFAULT NULL,
  `score` int(11) DEFAULT NULL,
  `tags` char(200) DEFAULT NULL,
  `isLock` int(11) DEFAULT NULL,
  `category` char(100) DEFAULT NULL,
  `group_id` int(11) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=171 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `strategy_cust`
--

LOCK TABLES `strategy_cust` WRITE;
/*!40000 ALTER TABLE `strategy_cust` DISABLE KEYS */;
INSERT INTO `strategy_cust` VALUES (1,'nebula','IP下单不支付','>4 in 30min no pay','1542255171781','online',1503637233341,1503637233341,1502889958243,1564925159000,1542255279153,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"distinct orderid\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"0 paystatus\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"HOLDER\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0b\\u5355\\u4e0d\\u652f\\u4ed8\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503637233341, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">4 in 30min no pay\", \"isLock\": false, \"name\": \"IP\\u4e0b\\u5355\\u4e0d\\u652f\\u4ed8\", \"version\": 1542255171781, \"group_id\": 2, \"createtime\": 1503637233341}',0,'下单不支付',0,'ORDER',2),(2,'nebula','IP使用相同邀请码注册','>3 register_count, 1 register_channel in 1h','1542255171781','online',1504493794161,1504493794161,1484042007770,1609667608438,1542255262644,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"did\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"register_channel\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"register_channel\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"^\\\\s*$\", \"op\": \"!regex\", \"left\": \"register_channel\"}, {\"right\": \"c_ip\", \"op\": \"=\", \"left\": \"c_ip\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9080\\u8bf7\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042007770, \"endeffect\": 1609667608438, \"modifytime\": 1504493794161, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3 register_count, 1 register_channel in 1h\", \"isLock\": false, \"name\": \"IP\\u4f7f\\u7528\\u76f8\\u540c\\u9080\\u8bf7\\u7801\\u6ce8\\u518c\", \"version\": 1542255171781, \"group_id\": 2, \"createtime\": 1504493794161}',0,'邀请注册',0,'ACCOUNT',2),(3,'nebula','IP使用相同邀请码注册5m','>2 register_count, same register_channel in 5m','1542255171781','online',1504494011629,1504494011629,1484042007770,1609667608438,1542255262703,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"did\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_regist_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"register_channel\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"^\\\\s*$\", \"op\": \"!regex\", \"left\": \"register_channel\"}, {\"right\": \"c_ip\", \"op\": \"=\", \"left\": \"c_ip\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9080\\u8bf7\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042007770, \"endeffect\": 1609667608438, \"modifytime\": 1504494011629, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 register_count, same register_channel in 5m\", \"isLock\": false, \"name\": \"IP\\u4f7f\\u7528\\u76f8\\u540c\\u9080\\u8bf7\\u7801\\u6ce8\\u518c5m\", \"version\": 1542255171781, \"group_id\": 2, \"createtime\": 1504494011629}',0,'邀请注册',0,'ACCOUNT',2),(4,'nebula','IP关联多个用户','>5 in 5m','1542255171781','online',1503900505932,1503900505932,1484044813003,1641120013785,1542255262750,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484044813003, \"endeffect\": 1641120013785, \"modifytime\": 1503900505932, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5m\", \"isLock\": false, \"name\": \"IP\\u5173\\u8054\\u591a\\u4e2a\\u7528\\u6237\", \"version\": 1542255171781, \"group_id\": 2, \"createtime\": 1503900505932}',0,'高频关联',0,'ACCOUNT',2),(5,'nebula','IP关联多个设备','>5 in 5m','1542255171782','online',1503901279068,1503901279068,1484044813003,1641120013785,1542255262797,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_distinct_count_did__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484044813003, \"endeffect\": 1641120013785, \"modifytime\": 1503901279068, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5m\", \"isLock\": false, \"name\": \"IP\\u5173\\u8054\\u591a\\u4e2a\\u8bbe\\u5907\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503901279068}',0,'高频关联',0,'ACCOUNT',2),(6,'nebula','IP关联多用户请求登录','>5用户 in 5min','1542255171782','online',1503568146528,1503568146528,1484040852259,1641116053528,1542255262841,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_login_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503568146528, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5\\u7528\\u6237 in 5min\", \"isLock\": false, \"name\": \"IP\\u5173\\u8054\\u591a\\u7528\\u6237\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503568146528}',0,'关联登录',0,'ACCOUNT',2),(7,'nebula','IP关联多设备请求登录','>5设备 in 5min','1542255171782','online',1503568119087,1503568119087,1484040852259,1641116053528,1542255262895,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"did\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503568119087, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5\\u8bbe\\u5907 in 5min\", \"isLock\": false, \"name\": \"IP\\u5173\\u8054\\u591a\\u8bbe\\u5907\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503568119087}',0,'关联登录',0,'ACCOUNT',2),(8,'nebula','IP响应字节过大','> 5M','1542255171782','online',1503375172727,1503375172727,1477908654360,1570183854490,1542255243000,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"byte\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5242880\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"s_bytes\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u6076\\u610f\\u626b\\u63cf\"], \"app\": \"nebula\", \"starteffect\": 1477908654360, \"endeffect\": 1570183854490, \"modifytime\": 1503375172727, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"> 5M\", \"isLock\": false, \"name\": \"IP\\u54cd\\u5e94\\u5b57\\u8282\\u8fc7\\u5927\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503375172727}',0,'恶意扫描',0,'VISITOR',2),(9,'nebula','IP多个用户请求注册','>2 uid in 10m','1542255171782','online',1504174198108,1504174198108,1484042234738,1641031035299,1542255262955,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"uid\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1504174198108, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 uid in 10m\", \"isLock\": false, \"name\": \"IP\\u591a\\u4e2a\\u7528\\u6237\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504174198108}',0,'关联注册',0,'ACCOUNT',2),(10,'nebula','IP多个设备请求注册','>2 did in 10m','1542255171782','online',1504174224401,1504174224401,1484042234738,1641031035299,1542255263036,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"did\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1504174224401, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 did in 10m\", \"isLock\": false, \"name\": \"IP\\u591a\\u4e2a\\u8bbe\\u5907\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504174224401}',0,'关联注册',0,'ACCOUNT',2),(11,'nebula','IP多次使用相同密码注册','>3, 1密码 in 5m','1542255171782','online',1503386404862,1503386404862,1484042523835,1672480924640,1542255263081,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_regist_distinct_count_password__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_regist_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042523835, \"endeffect\": 1672480924640, \"modifytime\": 1503386404862, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3, 1\\u5bc6\\u7801 in 5m\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u4f7f\\u7528\\u76f8\\u540c\\u5bc6\\u7801\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503386404862}',0,'高频注册',0,'ACCOUNT',2),(12,'nebula','IP多次取消订单','>3 in 30min distinct orderid','1542255171782','online',1503634816782,1503634816782,1502889958243,1564925159000,1542255279170,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_CANCEL\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_CANCEL\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_CANCEL\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u53d6\\u6d88\\u8ba2\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634816782, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 in 30min distinct orderid\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u53d6\\u6d88\\u8ba2\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634816782}',0,'取消订单',0,'ORDER',2),(13,'nebula','IP多次注册失败','>5 in 5m','1542255171782','online',1503386667613,1503386667613,1484042234738,1641031035299,1542255263125,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"F\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"F\", \"left\": \"result\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503386667613, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5m\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u6ce8\\u518c\\u5931\\u8d25\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503386667613}',0,'高频注册',0,'ACCOUNT',2),(14,'nebula','IP多次注册成功','>5 in 5m','1542255171782','online',1503386756408,1503386756408,1484042234738,1641031035299,1542255263147,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"T\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"T\", \"left\": \"result\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503386756408, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5m\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u6ce8\\u518c\\u6210\\u529f\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503386756408}',0,'高频注册',0,'ACCOUNT',2),(15,'nebula','IP多次登录失败','>5 in 10min F','1542255171782','online',1503565039645,1503565039645,1484040852259,1641116053528,1542255263199,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"F\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"F\", \"left\": \"result\", \"op\": \"==\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565039645, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 10min F\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u767b\\u5f55\\u5931\\u8d25\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565039645}',0,'高频登录',0,'ACCOUNT',2),(16,'nebula','IP多次登录成功','>5 in 10min T','1542255171782','online',1503564916674,1503564916674,1484040852259,1641116053528,1542255263257,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"T\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"T\", \"left\": \"result\", \"op\": \"==\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503564916674, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 10min T\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u767b\\u5f55\\u6210\\u529f\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503564916674}',0,'高频登录',0,'ACCOUNT',2),(17,'nebula','IP多次请求下单','>5 in 30min','1542255171782','online',1503633821634,1503633821634,1502889958243,1564925159000,1542255279189,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503633821634, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 30min\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503633821634}',0,'高频下单',0,'ORDER',2),(18,'nebula','IP多次请求下单__不同商品','>2 in 1h, product_id','1542255171782','online',1504160214304,1504160214304,1482826795423,1545898796395,1542255279202,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"product_id\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160214304, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, product_id\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5546\\u54c1\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160214304}',0,'不同下单',0,'ORDER',2),(19,'nebula','IP多次请求下单__不同商户','>2 in 1h, merchant','1542255171782','online',1504160220254,1504160220254,1482826795423,1545898796395,1542255279218,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"merchant\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160220254, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, merchant\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5546\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160220254}',0,'不同下单',0,'ORDER',2),(20,'nebula','IP多次请求下单__不同地址','>2 in 1h, receiver_address_detail','1542255171782','online',1504160245099,1504160245099,1482826795423,1545898796395,1542255279233,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_detail\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160245099, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_address_detail\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5730\\u5740\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160245099}',0,'不同下单',0,'ORDER',2),(21,'nebula','IP多次请求下单__不同城市','>2 in 1h, receiver_address_city ','1542255171782','online',1504160197939,1504160197939,1482826795423,1545898796395,1542255279250,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_city\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160197939, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_address_city \", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u57ce\\u5e02\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160197939}',0,'不同下单',0,'ORDER',2),(22,'nebula','IP多次请求下单__不同手机号','>2 in 1h, receiver_mobile','1542255171782','online',1504160226047,1504160226047,1482826795423,1545898796395,1542255279262,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_mobile\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160226047, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_mobile\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u624b\\u673a\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160226047}',0,'不同下单',0,'ORDER',2),(23,'nebula','IP多次请求下单__不同收货人','>2 in 1h, user_name','1542255171782','online',1504160208838,1504160208838,1482826795423,1545898796395,1542255279276,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"user_name\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160208838, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, user_name\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u6536\\u8d27\\u4eba\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160208838}',0,'不同下单',0,'ORDER',2),(24,'nebula','IP多次请求下单__不同金额','>2 in 1h, order_money_amount','1542255171782','online',1504160236012,1504160236012,1482826795423,1545898796395,1542255279290,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_money_amount\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160236012, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, order_money_amount\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u91d1\\u989d\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160236012}',0,'不同下单',0,'ORDER',2),(25,'nebula','IP多次请求下单__同一商品','>5 in 1h, product_id','1542255171782','online',1504155104432,1504155104432,1482826795423,1545898796395,1542255279303,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"product_id\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155104432, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, product_id\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5546\\u54c1\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155104432}',0,'单一下单',0,'ORDER',2),(26,'nebula','IP多次请求下单__同一商户','>5 in 1h, merchant','1542255171782','online',1504155163196,1504155163196,1482826795423,1545898796395,1542255279316,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"merchant\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155163196, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, merchant\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5546\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155163196}',0,'单一下单',0,'ORDER',2),(27,'nebula','IP多次请求下单__同一地址','>5 in 1h, receiver_address_detail','1542255171782','online',1504168922629,1504168922629,1482826795423,1545898796395,1542255279339,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_detail\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504168922629, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_address_detail\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5730\\u5740\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504168922629}',0,'单一下单',0,'ORDER',2),(28,'nebula','IP多次请求下单__同一城市','>5 in 1h, receiver_address_city ','1542255171782','online',1504154957939,1504154957939,1482826795423,1545898796395,1542255279352,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_city\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504154957939, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_address_city \", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u57ce\\u5e02\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504154957939}',0,'单一下单',0,'ORDER',2),(29,'nebula','IP多次请求下单__同手机号','>5 in 1h, receiver_mobile','1542255171782','online',1504158858195,1504158858195,1482826795423,1545898796395,1542255279364,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_mobile\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504158858195, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_mobile\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u624b\\u673a\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504158858195}',0,'单一下单',0,'ORDER',2),(30,'nebula','IP多次请求下单__同收货人','>5 in 1h, user_name','1542255171782','online',1504155055631,1504155055631,1482826795423,1545898796395,1542255279383,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"user_name\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155055631, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, user_name\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u6536\\u8d27\\u4eba\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155055631}',0,'单一下单',0,'ORDER',2),(31,'nebula','IP多次请求下单__金额较低','>5 in 1h, order_money_amount<= 100','1542255171782','online',1504155231630,1504155231630,1482826795423,1545898796395,1542255279409,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u91d1\\u989d\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"order_money_amount\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u6b21\\u6570\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"100\", \"left\": \"order_money_amount\", \"op\": \"<=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155231630, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, order_money_amount<= 100\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u91d1\\u989d\\u8f83\\u4f4e\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155231630}',0,'单一下单',0,'ORDER',2),(32,'nebula','IP多次请求下单__金额较高','>5 in 1h, order_money_amount > 100','1542255171782','online',1504159669567,1504159669567,1482826795423,1545898796395,1542255279426,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u91d1\\u989d\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"order_money_amount\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u6b21\\u6570\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"100\", \"left\": \"order_money_amount\", \"op\": \">\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159669567, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, order_money_amount > 100\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u91d1\\u989d\\u8f83\\u9ad8\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159669567}',0,'单一下单',0,'ORDER',2),(33,'nebula','IP多次请求注册','>10 in 5m','1542255171782','online',1503386187693,1503386187693,1484042234738,1641031035299,1542255263318,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503386187693, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">10 in 5m\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503386187693}',0,'高频注册',0,'ACCOUNT',2),(34,'nebula','IP多次请求登录','>5 in 5min','1542255171782','online',1503564773589,1503564773589,1484040852259,1641116053528,1542255263380,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_login_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503564773589, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5min\", \"isLock\": false, \"name\": \"IP\\u591a\\u6b21\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503564773589}',0,'高频登录',0,'ACCOUNT',2),(35,'nebula','IP多用户请求下单','>3 用户 in 30min','1542255171782','online',1503634303042,1503634303042,1502889958243,1564925159000,1542255279439,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634303042, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 \\u7528\\u6237 in 30min\", \"isLock\": false, \"name\": \"IP\\u591a\\u7528\\u6237\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634303042}',0,'关联下单',0,'ORDER',2),(36,'nebula','IP多设备请求下单','>3 设备 in 30min','1542255171782','online',1503634153224,1503634153224,1502889958243,1564925159000,1542255279453,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"did\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634153224, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 \\u8bbe\\u5907 in 30min\", \"isLock\": false, \"name\": \"IP\\u591a\\u8bbe\\u5907\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634153224}',0,'关联下单',0,'ORDER',2),(37,'nebula','IP大量404返回','>10 in 5m','1542255171782','online',1503316238558,1503316238558,1484101084953,1609553885794,1542255243050,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"404\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"status\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"404\", \"left\": \"status\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u6076\\u610f\\u626b\\u63cf\"], \"app\": \"nebula\", \"starteffect\": 1484101084953, \"endeffect\": 1609553885794, \"modifytime\": 1503316238558, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">10 in 5m\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf404\\u8fd4\\u56de\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503316238558}',0,'恶意扫描',0,'VISITOR',2),(38,'nebula','IP大量4XX返回','>10 in 5m, 不包含404','1542255171782','online',1503316303247,1503316303247,1484101084953,1609553885794,1542255243084,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"399\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"status\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"500\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"status\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"404\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"status\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"399\", \"left\": \"status\", \"op\": \">\"}, {\"right\": \"500\", \"left\": \"status\", \"op\": \"<\"}, {\"right\": \"404\", \"left\": \"status\", \"op\": \"!=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u6076\\u610f\\u626b\\u63cf\"], \"app\": \"nebula\", \"starteffect\": 1484101084953, \"endeffect\": 1609553885794, \"modifytime\": 1503316303247, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">10 in 5m, \\u4e0d\\u5305\\u542b404\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf4XX\\u8fd4\\u56de\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503316303247}',0,'恶意扫描',0,'VISITOR',2),(39,'nebula','IP大量动态请求','>100 in 5m','1542255171782','online',1503314912283,1503314912283,1484102219223,1641091020091,1542255243128,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484102219223, \"endeffect\": 1641091020091, \"modifytime\": 1503314912283, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">100 in 5m\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u52a8\\u6001\\u8bf7\\u6c42\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503314912283}',0,'高频访问',0,'VISITOR',2),(40,'nebula','IP大量访问','>300 in 5m 静态+动态','1542255171782','online',1503316539874,1503316539874,1484102219223,1641091020091,1542255243150,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"300\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484102219223, \"endeffect\": 1641091020091, \"modifytime\": 1503316539874, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">300 in 5m \\u9759\\u6001+\\u52a8\\u6001\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bbf\\u95ee\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503316539874}',0,'高频访问',0,'VISITOR',2),(41,'nebula','IP大量请求不加载静态资源','>50 动态+静态, 0静态 in 5m','1542255171782','online',1503317182818,1503317182818,1484101981295,1672540382000,1542255243174,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"50\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_static_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484101981295, \"endeffect\": 1672540382000, \"modifytime\": 1503317182818, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">50 \\u52a8\\u6001+\\u9759\\u6001, 0\\u9759\\u6001 in 5m\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bf7\\u6c42\\u4e0d\\u52a0\\u8f7d\\u9759\\u6001\\u8d44\\u6e90\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503317182818}',0,'高频访问',0,'VISITOR',2),(42,'nebula','IP大量请求不带referrer','>20, 0 referrer in 5m','1542255171782','online',1503376045710,1503376045710,1484102481911,1672540882527,1542255243224,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_clicks_count_refererhit__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"20\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484102481911, \"endeffect\": 1672540882527, \"modifytime\": 1503376045710, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">20, 0 referrer in 5m\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bf7\\u6c42\\u4e0d\\u5e26referrer\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503376045710}',0,'单一访问',0,'VISITOR',2),(43,'nebula','IP大量请求单个接口','>10 , 页面=1','1542255171782','online',1503316836331,1503316836331,1484102336270,1641091136886,1542255243276,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_distinct_count_page__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484102336270, \"endeffect\": 1641091136886, \"modifytime\": 1503316836331, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">10 , \\u9875\\u9762=1\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bf7\\u6c42\\u5355\\u4e2a\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503316836331}',0,'单一访问',0,'VISITOR',2),(44,'nebula','IP大量请求注册接口','>5 in 5m 不需要解析 register','1542255171782','online',1503317409061,1503317409061,1484102697103,1672454699088,1542255243336,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"register\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"register\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484102697103, \"endeffect\": 1672454699088, \"modifytime\": 1503317409061, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">5 in 5m \\u4e0d\\u9700\\u8981\\u89e3\\u6790 register\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bf7\\u6c42\\u6ce8\\u518c\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503317409061}',0,'高频访问',0,'VISITOR',2),(45,'nebula','IP大量请求登录接口','>5 in 5m 不需要解析 login','1542255171782','online',1503316979996,1503316979996,1484102697103,1672454699088,1542255243402,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"login\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"login\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484102697103, \"endeffect\": 1672454699088, \"modifytime\": 1503316979996, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">5 in 5m \\u4e0d\\u9700\\u8981\\u89e3\\u6790 login\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bf7\\u6c42\\u767b\\u5f55\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503316979996}',0,'高频访问',0,'VISITOR',2),(46,'nebula','IP大量请求相似接口','>20 ,<4 页面  cbytes_cv < 0.1 in 5m','1542255171782','online',1503374673661,1503374673661,1484101695856,1609554496426,1542255243445,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_bytes\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"20\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_distinct_count_page__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0.1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_cv_cbytes__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484101695856, \"endeffect\": 1609554496426, \"modifytime\": 1503374673661, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">20 ,<4 \\u9875\\u9762  cbytes_cv < 0.1 in 5m\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bf7\\u6c42\\u76f8\\u4f3c\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503374673661}',0,'单一访问',0,'VISITOR',2),(47,'nebula','IP大量请求签到接口','>5 in 5m 不需要解析 sign','1542255171782','online',1503317498863,1503317498863,1484102697103,1672454699088,1542255243518,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"sign\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"sign\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484102697103, \"endeffect\": 1672454699088, \"modifytime\": 1503317498863, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">5 in 5m \\u4e0d\\u9700\\u8981\\u89e3\\u6790 sign\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8bf7\\u6c42\\u7b7e\\u5230\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503317498863}',0,'高频访问',0,'VISITOR',2),(48,'nebula','IP大量连续GET请求','>30 in 5m','1542255171782','online',1503315074348,1503315074348,1484104685827,1672543086878,1542255243591,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"30\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_get_ratio__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484104685827, \"endeffect\": 1672543086878, \"modifytime\": 1503315074348, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">30 in 5m\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8fde\\u7eedGET\\u8bf7\\u6c42\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503315074348}',0,'高频访问',0,'VISITOR',2),(49,'nebula','IP大量连续POST请求','>30 in 5m','1542255171782','online',1503908777232,1503908777232,1484104685827,1672543086878,1542255243675,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"30\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_post_ratio__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484104685827, \"endeffect\": 1672543086878, \"modifytime\": 1503908777232, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">30 in 5m\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8fde\\u7eedPOST\\u8bf7\\u6c42\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503908777232}',0,'高频访问',0,'VISITOR',2),(50,'nebula','IP大量连续其他类型请求','>20 in 5m 非GET非POST','1542255171782','online',1503315379912,1503315379912,1484104685827,1672543086878,1542255243706,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!in\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET,POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"20\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"GET,POST\", \"left\": \"method\", \"op\": \"!in\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484104685827, \"endeffect\": 1672543086878, \"modifytime\": 1503315379912, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">20 in 5m \\u975eGET\\u975ePOST\", \"isLock\": false, \"name\": \"IP\\u5927\\u91cf\\u8fde\\u7eed\\u5176\\u4ed6\\u7c7b\\u578b\\u8bf7\\u6c42\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503315379912}',0,'高频访问',0,'VISITOR',2),(51,'nebula','IP当天关联多个用户','>20, in 1d','1542255171782','online',1503904138716,1503904138716,1484046419489,1641121620142,1542255263451,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"T\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"profile\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"20\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_distinct_uid__1h__profile\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"profile\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e00\\u5929\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484046419489, \"endeffect\": 1641121620142, \"modifytime\": 1503904138716, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">20, in 1d\", \"isLock\": false, \"name\": \"IP\\u5f53\\u5929\\u5173\\u8054\\u591a\\u4e2a\\u7528\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503904138716}',0,'一天关联',0,'ACCOUNT',2),(52,'nebula','IP扫描管理后台','> 10 in 5m','1542255171782','online',1503374841090,1503374841090,1472797910264,1630650711288,1542255243745,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(attachments|upimg|images|css|uploadfiles|html|uploads|templets|static|template|data|inc|forumdata|upload|includes|cache|avatar).*\\\\.(php|jsp).*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_stem\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"5\\u5206\\u949f\\u5185\\u6240\\u6709\\u6ee1\\u8db3\\u6761\\u4ef6\\u4e00\\u7684\\u8bbf\\u95ee\\u6b21\\u6570\\u5927\\u4e8e10\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \".*(attachments|upimg|images|css|uploadfiles|html|uploads|templets|static|template|data|inc|forumdata|upload|includes|cache|avatar).*\\\\\\\\.(php|jsp).*\", \"left\": \"uri_stem\", \"op\": \"regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"IP\\u626b\\u63cf\\u7ba1\\u7406\\u540e\\u53f0\\u5730\\u5740\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u6076\\u610f\\u626b\\u63cf\"], \"app\": \"nebula\", \"starteffect\": 1472797910264, \"endeffect\": 1630650711288, \"modifytime\": 1503374841090, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"> 10 in 5m\", \"isLock\": false, \"name\": \"IP\\u626b\\u63cf\\u7ba1\\u7406\\u540e\\u53f0\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503374841090}',0,'恶意扫描',0,'VISITOR',2),(53,'nebula','IP换密码请求登录单账号','>5 in 5min','1542255171782','online',1503565298398,1503565298398,1484040852259,1641116053528,1542255263524,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_login_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_login_distinct_count_password__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565298398, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5min\", \"isLock\": false, \"name\": \"IP\\u6362\\u5bc6\\u7801\\u8bf7\\u6c42\\u767b\\u5f55\\u5355\\u8d26\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565298398}',0,'高频登录',0,'ACCOUNT',2),(54,'nebula','IP相同UA大量请求单个页面','>50, 1 页面, 1UA','1542255171782','online',1503375522981,1503375522981,1496389151220,1593502751000,1542255243800,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"50\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u540cUA\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"useragent\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"op\": \"=\", \"left\": \"c_ip\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u540c\\u9875\\u9762\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"uri_stem\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"op\": \"=\", \"left\": \"c_ip\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1496389151220, \"endeffect\": 1593502751000, \"modifytime\": 1503375522981, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">50, 1 \\u9875\\u9762, 1UA\", \"isLock\": false, \"name\": \"IP\\u76f8\\u540cUA\\u5927\\u91cf\\u8bf7\\u6c42\\u5355\\u4e2a\\u9875\\u9762\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503375522981}',0,'高频访问',0,'VISITOR',2),(55,'nebula','IP相同密码请求登录不同账号','>3 in 5min','1542255171782','online',1503565440623,1503565440623,1484040852259,1641116053528,1542255263586,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_login_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__account_login_distinct_count_password__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565440623, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3 in 5min\", \"isLock\": false, \"name\": \"IP\\u76f8\\u540c\\u5bc6\\u7801\\u8bf7\\u6c42\\u767b\\u5f55\\u4e0d\\u540c\\u8d26\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565440623}',0,'高频登录',0,'ACCOUNT',2),(56,'nebula','IP访问.asp文件','> 5 动态+静态 ,404 .asp','1542255171782','online',1503374461363,1503374461363,1479709588319,1572589588503,1542255243828,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\\u8bbf\\u95eeip\\u5305\\u542b.\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u8bbf\\u95eeurl\\u4ee5.asp\\u7ed3\\u5c3e\", \"op\": \"endwith\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".asp\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_stem\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u72b6\\u6001\\u7801\\u4e3a404\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"404\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"status\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u5355IP5\\u5206\\u949f\\u5185\\u8bbf\\u95ee\\u6b21\\u6570\\u5927\\u4e8e5\", \"op\": \">=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\\u8bbf\\u95ee.asp\\u6587\\u4ef6\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u6076\\u610f\\u626b\\u63cf\"], \"app\": \"nebula\", \"starteffect\": 1479709588319, \"endeffect\": 1572589588503, \"modifytime\": 1503374461363, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"> 5 \\u52a8\\u6001+\\u9759\\u6001 ,404 .asp\", \"isLock\": false, \"name\": \"IP\\u8bbf\\u95ee.asp\\u6587\\u4ef6\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503374461363}',0,'恶意扫描',0,'VISITOR',2),(57,'nebula','IP请求A一段时间内没有请求B','延迟判断 5m','1542255171782','online',1504075245353,1504075245353,1504075128120,1627799928000,1542255263615,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"A\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"A\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"sleep\", \"config\": {\"duration\": 5, \"unit\": \"m\"}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"B\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"B\", \"left\": \"page\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u8df3\\u8dc3\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1504075128120, \"endeffect\": 1627799928000, \"modifytime\": 1504075245353, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \"\\u5ef6\\u8fdf\\u5224\\u65ad 5m\", \"isLock\": false, \"name\": \"IP\\u8bf7\\u6c42A\\u4e00\\u6bb5\\u65f6\\u95f4\\u5185\\u6ca1\\u6709\\u8bf7\\u6c42B\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504075245353}',0,'跳跃访问',0,'ACCOUNT',2),(58,'nebula','IP请求下单行为单一','>3, <=4页面  in 30min','1542255171782','online',1503633895138,1503633895138,1502889958243,1564925159000,1542255279468,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"page\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503633895138, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3, <=4\\u9875\\u9762  in 30min\", \"isLock\": false, \"name\": \"IP\\u8bf7\\u6c42\\u4e0b\\u5355\\u884c\\u4e3a\\u5355\\u4e00\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503633895138}',0,'高频下单',0,'ORDER',2),(59,'nebula','IP请求可疑文件地址','> 10 in 5m','1542255171782','online',1503374250886,1503374250886,1472800501994,1599203703047,1542255243868,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\\u8bf7\\u6c42\\u53ef\\u7591\\u6587\\u4ef6\\u7684\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(vhost|bbs|host|wwwroot|www|site|root|hytop|flashfxp|backup|data).*\\\\.(rar|zip|gz|tar).*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_stem\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"5\\u5206\\u949f\\u5185\\u6240\\u6709\\u6ee1\\u8db3\\u6761\\u4ef6\\u4e00\\u7684\\u8bbf\\u95ee\\u6b21\\u6570\\u5927\\u4e8e10\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \".*(vhost|bbs|host|wwwroot|www|site|root|hytop|flashfxp|backup|data).*\\\\\\\\.(rar|zip|gz|tar).*\", \"left\": \"uri_stem\", \"op\": \"regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"IP\\u8bf7\\u6c42\\u53ef\\u7591\\u6587\\u4ef6\\u5730\\u5740\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u6076\\u610f\\u626b\\u63cf\"], \"app\": \"nebula\", \"starteffect\": 1472800501994, \"endeffect\": 1599203703047, \"modifytime\": 1503374250886, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"> 10 in 5m\", \"isLock\": false, \"name\": \"IP\\u8bf7\\u6c42\\u53ef\\u7591\\u6587\\u4ef6\\u5730\\u5740\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503374250886}',0,'恶意扫描',0,'VISITOR',2),(60,'nebula','IP请求注册前未访问必要资源','register, no xxx in 5m','1542255171782','online',1504002440025,1504002440025,1504001710079,1627812910000,1542255263690,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"HOLDER\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u8df3\\u8dc3\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1504001710079, \"endeffect\": 1627812910000, \"modifytime\": 1504002440025, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \"register, no xxx in 5m\", \"isLock\": false, \"name\": \"IP\\u8bf7\\u6c42\\u6ce8\\u518c\\u524d\\u672a\\u8bbf\\u95ee\\u5fc5\\u8981\\u8d44\\u6e90\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504002440025}',0,'跳跃访问',0,'ACCOUNT',2),(61,'nebula','IP请求登录前未访问必要资源','login, no xxx in 5m','1542255171782','online',1504002360471,1504002360471,1504001710079,1627812910000,1542255263709,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"HOLDER\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u8df3\\u8dc3\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1504001710079, \"endeffect\": 1627812910000, \"modifytime\": 1504002360471, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \"login, no xxx in 5m\", \"isLock\": false, \"name\": \"IP\\u8bf7\\u6c42\\u767b\\u5f55\\u524d\\u672a\\u8bbf\\u95ee\\u5fc5\\u8981\\u8d44\\u6e90\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504002360471}',0,'跳跃访问',0,'ACCOUNT',2),(62,'nebula','IP集中请求注册接口','>5 in 30m, 动态<=4','1542255171782','online',1503986498909,1503986498910,1484042234738,1641031035299,1542255263730,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"distinct page <=4\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"page\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503986498910, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 30m, \\u52a8\\u6001<=4\", \"isLock\": false, \"name\": \"IP\\u96c6\\u4e2d\\u8bf7\\u6c42\\u6ce8\\u518c\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503986498909}',0,'高频注册',0,'ACCOUNT',2),(63,'nebula','IP集中请求登录','>5 ，页面<=4 in 30min','1542255171782','online',1503565104097,1503565104097,1484040852259,1641116053528,1542255263745,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"page\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565104097, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 \\uff0c\\u9875\\u9762<=4 in 30min\", \"isLock\": false, \"name\": \"IP\\u96c6\\u4e2d\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565104097}',0,'高频登录',0,'ACCOUNT',2),(64,'nebula','IP集中请求部分接口','>20 , < 5页面 in 5m','1542255171782','online',1503374735116,1503374735116,1496373568624,1625023169000,1542255243922,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_distinct_count_page__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"20\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1496373568624, \"endeffect\": 1625023169000, \"modifytime\": 1503374735116, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">20 , < 5\\u9875\\u9762 in 5m\", \"isLock\": false, \"name\": \"IP\\u96c6\\u4e2d\\u8bf7\\u6c42\\u90e8\\u5206\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503374735116}',0,'单一访问',0,'VISITOR',2),(65,'nebula','IP页面停留时间过短App','>100, avg < 0.5, in 5m, web','1542255171782','online',1503376070641,1503376070641,1484101358008,1609554158776,1542255243976,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(iphone|ipod|android|ios|phone|ipad).*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"useragent\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"500\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_clicks_avg_timediff__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484101358008, \"endeffect\": 1609554158776, \"modifytime\": 1503376070641, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">100, avg < 0.5, in 5m, web\", \"isLock\": false, \"name\": \"IP\\u9875\\u9762\\u505c\\u7559\\u65f6\\u95f4\\u8fc7\\u77edApp\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503376070641}',0,'高频访问',0,'VISITOR',2),(66,'nebula','IP页面停留时间过短Web','>100, avg < 0.8, in 5m, web','1542255171782','online',1503375879225,1503375879225,1484101358008,1609554158776,1542255243993,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(iphone|ipod|android|ios|phone|ipad).*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"useragent\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_dynamic_count__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"800\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"ip__visit_clicks_avg_timediff__5m__rt\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1484101358008, \"endeffect\": 1609554158776, \"modifytime\": 1503375879225, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \">100, avg < 0.8, in 5m, web\", \"isLock\": false, \"name\": \"IP\\u9875\\u9762\\u505c\\u7559\\u65f6\\u95f4\\u8fc7\\u77edWeb\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503375879225}',0,'高频访问',0,'VISITOR',2),(67,'nebula','Java 用户代理','java','1542255171782','online',1503317687594,1503317687594,1473058630310,1630565831241,1542255244010,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"java\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"useragent\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\\u8bf7\\u6c42Useragent\\u4e2d\\u5305\\u542b\\u670d\\u52a1\\u5668\\u4fe1\\u606f\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8aUA\"], \"app\": \"nebula\", \"starteffect\": 1473058630310, \"endeffect\": 1630565831241, \"modifytime\": 1503317687594, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"java\", \"isLock\": false, \"name\": \"Java \\u7528\\u6237\\u4ee3\\u7406\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503317687594}',0,'特殊UA',0,'VISITOR',2),(68,'nebula','Python 用户代理','python','1542255171782','online',1503317676324,1503317676324,1473058630310,1630565831241,1542255244026,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"python\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"useragent\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\\u8bf7\\u6c42Useragent\\u4e2d\\u5305\\u542b\\u670d\\u52a1\\u5668\\u4fe1\\u606f\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8aUA\"], \"app\": \"nebula\", \"starteffect\": 1473058630310, \"endeffect\": 1630565831241, \"modifytime\": 1503317676324, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"python\", \"isLock\": false, \"name\": \"Python \\u7528\\u6237\\u4ee3\\u7406\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503317676324}',0,'特殊UA',0,'VISITOR',2),(69,'nebula','Spider 用户代理','spider','1542255171782','online',1503376460453,1503376460453,1473058630310,1630565831241,1542255244043,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"spider\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"useragent\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\\u8bf7\\u6c42Useragent\\u4e2d\\u5305\\u542b\\u670d\\u52a1\\u5668\\u4fe1\\u606f\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8aUA\"], \"app\": \"nebula\", \"starteffect\": 1473058630310, \"endeffect\": 1630565831241, \"modifytime\": 1503376460453, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"spider\", \"isLock\": false, \"name\": \"Spider \\u7528\\u6237\\u4ee3\\u7406\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503376460453}',0,'特殊UA',0,'VISITOR',2),(70,'nebula','visit_directory_traversal_get_ip','GET参数中包含目录遍历的特征','1542255171782','online',1477984770328,1477984770328,1477984573968,1543389374110,1542255244076,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\\u8bf7\\u6c42IP\\u5305\\u542b.\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"GET\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u76ee\\u5f55\\u904d\\u5386\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"\\\\.\\\\.|/etc/passwd|c:\\\\\\\\\\\\\\\\|cmd\\\\.exe|\\\\\\\\\\\\\\\\|/\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"GET\\u53c2\\u6570\\u4e2d\\u5305\\u542b\\u76ee\\u5f55\\u904d\\u5386\\u7684\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u76ee\\u5f55\\u904d\\u5386\"], \"app\": \"nebula\", \"starteffect\": 1477984573968, \"endeffect\": 1543389374110, \"modifytime\": 1477984770328, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"GET\\u53c2\\u6570\\u4e2d\\u5305\\u542b\\u76ee\\u5f55\\u904d\\u5386\\u7684\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_directory_traversal_get_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477984770328}',0,'目录遍历',0,'VISITOR',2),(71,'nebula','visit_directory_traversal_post_ip','POST参数中包含目录遍历的特征','1542255171782','online',1477984883956,1477984883956,1477984830403,1543389630594,1542255244126,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\\u8bf7\\u6c42IP\\u5305\\u542b.\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"POST\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u76ee\\u5f55\\u904d\\u5386\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"\\\\.\\\\.|/etc/passwd|c:\\\\\\\\\\\\\\\\|cmd\\\\.exe|\\\\\\\\\\\\\\\\|/\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"post\\u53c2\\u6570\\u4e2d\\u5305\\u542b\\u76ee\\u5f55\\u904d\\u5386\\u7684\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u76ee\\u5f55\\u904d\\u5386\"], \"app\": \"nebula\", \"starteffect\": 1477984830403, \"endeffect\": 1543389630594, \"modifytime\": 1477984883956, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"POST\\u53c2\\u6570\\u4e2d\\u5305\\u542b\\u76ee\\u5f55\\u904d\\u5386\\u7684\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_directory_traversal_post_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477984883956}',0,'目录遍历',0,'VISITOR',2),(72,'nebula','visit_ngx_lua_waf_get_ip','GET参数中ngx_lua_waf策略补充','1542255171782','online',1477993025291,1477993025291,1477991442997,1511946643357,1542255244167,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"ngx_lua_waf\\u7b56\\u7565\\u8865\\u5145\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"\\\\.\\\\./|\\\\:\\\\$|\\\\$\\\\{|select.+(from|limit)|(?:(union(.*?)select))|having|rongjitest|sleep\\\\((\\\\s*)(\\\\d*)(\\\\s*)\\\\)|benchmark\\\\((.*)\\\\,(.*)\\\\)|base64_decode\\\\(|(?:from\\\\W+information_schema\\\\W)|(?:(?:current_)user|database|schema|connection_id)\\\\s*\\\\(|(?:etc\\\\/\\\\W*passwd)|into(\\\\s+)+(?:dump|out)file\\\\s*|group\\\\s+by.+\\\\(|xwork.MethodAccessor|(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\\\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\\\(|xwork\\\\.MethodAccessor|(gopher|doc|php|glob|file|phar|zlib|ftp|ldap|dict|ogg|data)\\\\:\\\\/|java\\\\.lang|\\\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\\\[|\\\\<(iframe|script|body|img|layer|div|meta|style|base|object|input)|(onmouseover|onerror|onload)\\\\=\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"GET\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"ngx_lua_waf\\u7b56\\u7565\\u8865\\u5145\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"ngx_lua_waf\"], \"app\": \"nebula\", \"starteffect\": 1477991442997, \"endeffect\": 1511946643357, \"modifytime\": 1477993025291, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"GET\\u53c2\\u6570\\u4e2dngx_lua_waf\\u7b56\\u7565\\u8865\\u5145\", \"isLock\": false, \"name\": \"visit_ngx_lua_waf_get_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477993025291}',0,'ngx_lua_waf',0,'VISITOR',2),(73,'nebula','visit_ngx_lua_waf_post_ip','POST参数中ngx_lua_waf策略补充','1542255171782','online',1477993610542,1477993610542,1477993382852,1543398183037,1542255244213,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"POST\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"ngx_lua_waf\\u7b56\\u7565\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"\\\\.\\\\./|\\\\:\\\\$|\\\\$\\\\{|select.+(from|limit)|(?:(union(.*?)select))|having|rongjitest|sleep\\\\((\\\\s*)(\\\\d*)(\\\\s*)\\\\)|benchmark\\\\((.*)\\\\,(.*)\\\\)|base64_decode\\\\(|(?:from\\\\W+information_schema\\\\W)|(?:(?:current_)user|database|schema|connection_id)\\\\s*\\\\(|(?:etc\\\\/\\\\W*passwd)|into(\\\\s+)+(?:dump|out)file\\\\s*|group\\\\s+by.+\\\\(|xwork.MethodAccessor|(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\\\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\\\(|xwork\\\\.MethodAccessor|(gopher|doc|php|glob|file|phar|zlib|ftp|ldap|dict|ogg|data)\\\\:\\\\/|java\\\\.lang|\\\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\\\[|\\\\<(iframe|script|body|img|layer|div|meta|style|base|object|input)|(onmouseover|onerror|onload)\\\\=\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_body\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"POST\\u53c2\\u6570\\u4e2dngx_lua_waf\\u7b56\\u7565\\u8865\\u5145\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"ngx_lua_waf\"], \"app\": \"nebula\", \"starteffect\": 1477993382852, \"endeffect\": 1543398183037, \"modifytime\": 1477993610542, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"POST\\u53c2\\u6570\\u4e2dngx_lua_waf\\u7b56\\u7565\\u8865\\u5145\", \"isLock\": false, \"name\": \"visit_ngx_lua_waf_post_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477993610542}',0,'ngx_lua_waf',0,'VISITOR',2),(74,'nebula','visit_rfi_get_ip','GET参数中包含rfi远程文件包含的特征','1542255171782','online',1477972718159,1477972718159,1477972555532,1574481355701,1542255244257,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"rfi\\u8fdc\\u7a0b\\u6587\\u4ef6\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"http://|https://|ftp://|php://|sftp://|zlib://|data://|glob://|phar://|file://|gopher://\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"GET\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"GET\\u53c2\\u6570\\u4e2d\\u5305\\u542brfi\\u8fdc\\u7a0b\\u6587\\u4ef6\\u5305\\u542b\\u7684\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"RFI\"], \"app\": \"nebula\", \"starteffect\": 1477972555532, \"endeffect\": 1574481355701, \"modifytime\": 1477972718159, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"GET\\u53c2\\u6570\\u4e2d\\u5305\\u542brfi\\u8fdc\\u7a0b\\u6587\\u4ef6\\u5305\\u542b\\u7684\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_rfi_get_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477972718159}',0,'RFI',0,'VISITOR',2),(75,'nebula','visit_rfi_post_ip','POST参数中包含rfi远程文件包含的特征','1542255171782','online',1477972805808,1477972805808,1477972735783,1543377535967,1542255244279,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"http://|https://|ftp://|php://|sftp://|zlib://|data://|glob://|phar://|file://|gopher://\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_body\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"POST\\u53c2\\u6570\\u4e2d\\u5305\\u542brfi\\u8fdc\\u7a0b\\u6587\\u4ef6\\u5305\\u542b\\u7684\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"RFI\"], \"app\": \"nebula\", \"starteffect\": 1477972735783, \"endeffect\": 1543377535967, \"modifytime\": 1477972805808, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"POST\\u53c2\\u6570\\u4e2d\\u5305\\u542brfi\\u8fdc\\u7a0b\\u6587\\u4ef6\\u5305\\u542b\\u7684\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_rfi_post_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477972805808}',0,'RFI',0,'VISITOR',2),(76,'nebula','visit_sql_injection_get_ip','GET参数中的包含SQL语句特征','1542255171782','online',1477969994711,1477969994711,1477969816948,1543374617253,1542255244313,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"SQL\\u8bed\\u53e5\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(\\\\bselect\\\\b|\\\\bunion\\\\b|\\\\bupdate\\\\b|\\\\bdelete\\\\b|\\\\binsert\\\\b|\\\\btable\\\\b|\\\\bascii\\\\b|\\\\bhex\\\\b|\\\\bunhex\\\\b|\\\\bdrop\\\\b).*\\\\bfrom\\\\b.*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"GET\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"GET\\u53c2\\u6570\\u4e2d\\u7684\\u5305\\u542bSQL\\u8bed\\u53e5\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"SQL\\u6ce8\\u5165\"], \"app\": \"nebula\", \"starteffect\": 1477969816948, \"endeffect\": 1543374617253, \"modifytime\": 1477969994711, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"GET\\u53c2\\u6570\\u4e2d\\u7684\\u5305\\u542bSQL\\u8bed\\u53e5\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_sql_injection_get_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477969994711}',0,'SQL注入',0,'VISITOR',2),(77,'nebula','visit_sql_injection_hardcore_get_ip','GET请求中包含SQL的符号','1542255171782','online',1477971907725,1477971907725,1477971844933,1511667864319,1542255244332,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"SQL\\u7b26\\u53f7\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"\\\\\\\"|/\\\\*|\\\\*/|\\\\||&&|--|;|\\\\(|\\\\)|\\\\\'|,|#|@@\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"GET\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"GET\\u8bf7\\u6c42\\u4e2d\\u5305\\u542bSQL\\u7684\\u7b26\\u53f7\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"SQL\\u6ce8\\u5165\"], \"app\": \"nebula\", \"starteffect\": 1477971844933, \"endeffect\": 1511667864319, \"modifytime\": 1477971907725, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"GET\\u8bf7\\u6c42\\u4e2d\\u5305\\u542bSQL\\u7684\\u7b26\\u53f7\", \"isLock\": false, \"name\": \"visit_sql_injection_hardcore_get_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477971907725}',0,'SQL注入',0,'VISITOR',2),(78,'nebula','visit_sql_injection_post_hardcore_ip','POST请求中包含SQL的符号','1542255171782','online',1477971835014,1477971835014,1477971398483,1511926598593,1542255244365,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"POST\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"SQL\\u7b26\\u53f7\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"\\\\\\\"|/\\\\*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_body\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"post\\u8bf7\\u6c42\\u4e2d\\u5305\\u542bsql\\u7684\\u7b26\\u53f7\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"SQL\\u6ce8\\u5165\"], \"app\": \"nebula\", \"starteffect\": 1477971398483, \"endeffect\": 1511926598593, \"modifytime\": 1477971835014, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"POST\\u8bf7\\u6c42\\u4e2d\\u5305\\u542bSQL\\u7684\\u7b26\\u53f7\", \"isLock\": false, \"name\": \"visit_sql_injection_post_hardcore_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477971835014}',0,'SQL注入',0,'VISITOR',2),(79,'nebula','visit_sql_injection_post_ip','POST参数中包含SQL语句特征','1542255171782','online',1477970202575,1477970202575,1477970129128,1543029329330,1542255244426,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"SQL\\u8bed\\u53e5\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(\\\\bselect\\\\b|\\\\bunion\\\\b|\\\\bupdate\\\\b|\\\\bdelete\\\\b|\\\\binsert\\\\b|\\\\btable\\\\b|\\\\bascii\\\\b|\\\\bhex\\\\b|\\\\bunhex\\\\b|\\\\bdrop\\\\b).*\\\\bfrom\\\\b.*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_body\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"POST\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"POST\\u53c2\\u6570\\u4e2d\\u5305\\u542bSQL\\u8bed\\u53e5\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"SQL\\u6ce8\\u5165\"], \"app\": \"nebula\", \"starteffect\": 1477970129128, \"endeffect\": 1543029329330, \"modifytime\": 1477970202575, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"POST\\u53c2\\u6570\\u4e2d\\u5305\\u542bSQL\\u8bed\\u53e5\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_sql_injection_post_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477970202575}',0,'SQL注入',0,'VISITOR',2),(80,'nebula','visit_xss_get_ip','GET参数包含跨站脚本攻击特征','1542255171782','online',1477989745579,1477989745580,1477989645897,1542789646124,1542255244446,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\\u8de8\\u7ad9\\u811a\\u672c\\u653b\\u51fb\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(%3c|%3e|<|>|[|]|~|`).*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"GET\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"GET\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"GET\\u53c2\\u6570\\u5305\\u542b\\u8de8\\u7ad9\\u811a\\u672c\\u653b\\u51fb\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"XSS\"], \"app\": \"nebula\", \"starteffect\": 1477989645897, \"endeffect\": 1542789646124, \"modifytime\": 1477989745580, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"GET\\u53c2\\u6570\\u5305\\u542b\\u8de8\\u7ad9\\u811a\\u672c\\u653b\\u51fb\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_xss_get_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477989745579}',0,'XSS',0,'VISITOR',2),(81,'nebula','visit_xss_post_ip','POST参数包含跨站脚本攻击特征','1542255171782','online',1477989841202,1477989841202,1477989763473,1511944963597,1542255244498,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"POST\\u8bf7\\u6c42\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"POST\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"method\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u8de8\\u7ad9\\u811a\\u672c\\u653b\\u51fb\\u7279\\u5f81\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(%3c|%3e|<|>|[|]|`).*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_body\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"POST\\u53c2\\u6570\\u5305\\u542b\\u8de8\\u7ad9\\u811a\\u672c\\u653b\\u51fb\\u7279\\u5f81\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"XSS\"], \"app\": \"nebula\", \"starteffect\": 1477989763473, \"endeffect\": 1511944963597, \"modifytime\": 1477989841202, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"POST\\u53c2\\u6570\\u5305\\u542b\\u8de8\\u7ad9\\u811a\\u672c\\u653b\\u51fb\\u7279\\u5f81\", \"isLock\": false, \"name\": \"visit_xss_post_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1477989841202}',0,'XSS',0,'VISITOR',2),(82,'nebula','visit_xss_request_ip','请求疑似xss','1542255171782','online',1472797105454,1472797105454,1472797039443,1630649840283,1542255244533,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"IP\\u8bbf\\u95eeURL\\u53c2\\u6570\\u5305\\u542bxss\\u653b\\u51fb\\u7279\\u5f81\\uff08\\u653b\\u51fb\\u5b57\\u7b26\\u4e32\\u5305\\u542b<script>\\u2026..</script>\\uff0cencode\\u540e\\u4e3a%3cscript%3e\\u548c%3c%2fscript%3e\\uff0c\\u5373url\\u53c2\\u6570\\u5305\\u542b\\u6b63\\u5219.*script\\\\%.*script\\\\%.*\\uff09\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*script.*script.*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uri_query\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\\u8bf7\\u6c42\\u7591\\u4f3cxss\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"XSS\"], \"app\": \"nebula\", \"starteffect\": 1472797039443, \"endeffect\": 1630649840283, \"modifytime\": 1472797105454, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"\\u8bf7\\u6c42\\u7591\\u4f3cxss\", \"isLock\": false, \"name\": \"visit_xss_request_ip\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1472797105454}',0,'XSS',0,'VISITOR',2),(83,'nebula','服务器用户代理','apachebench|pycurl, 不包括java|python','1542255171782','online',1503376597345,1503376597345,1473058630310,1630565831241,1542255244565,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".*(feeddemon|indy library|alexa toolbar|asktbfxtv|ahrefsbot|crawldaddy|coolpadwebkit|feedly|universalfeedparser|apachebench|microsoft url control|swiftbot|Zmeu|obot|jaunty|lightdeckreports bot|digext|httpclient|mj12bot|heritrix|easouspider|ezooms|httrack|harvest|audit|dirbuster|pangolin|nmap|sqln|-scan|hydra|parser|libwww|bbbike|sqlmap|w3af|owasp|nikto|fimap|havij|pycurl|zmeu|babykrokodil|netsparker|httperf|bench|SF/).*\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"useragent\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\\u8bf7\\u6c42Useragent\\u4e2d\\u5305\\u542b\\u670d\\u52a1\\u5668\\u4fe1\\u606f\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8aUA\"], \"app\": \"nebula\", \"starteffect\": 1473058630310, \"endeffect\": 1630565831241, \"modifytime\": 1503376597345, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"apachebench|pycurl, \\u4e0d\\u5305\\u62ecjava|python\", \"isLock\": false, \"name\": \"\\u670d\\u52a1\\u5668\\u7528\\u6237\\u4ee3\\u7406\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503376597345}',0,'特殊UA',0,'VISITOR',2),(84,'nebula','测试-地域FUNCTION','地域function测试策略','1542255171782','online',1504238527869,1504238527869,1504238467272,1509076867000,1542255244596,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"getlocation\", \"config\": {\"source_event_key\": \"nebula.HTTP_DYNAMIC.c_ip\", \"location_string\": [\"\\u4e0a\\u6d77\\u5e02\"], \"location_type\": \"province\", \"op\": \"=\"}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"VISITOR\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 18000}, \"type\": \"func\"}}], \"tags\": [], \"app\": \"nebula\", \"starteffect\": 1504238467272, \"endeffect\": 1509076867000, \"modifytime\": 1504238527869, \"score\": 0, \"category\": \"VISITOR\", \"remark\": \"\\u5730\\u57dffunction\\u6d4b\\u8bd5\\u7b56\\u7565\", \"isLock\": false, \"name\": \"\\u6d4b\\u8bd5-\\u5730\\u57dfFUNCTION\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504238527869}',0,'',0,'VISITOR',2),(85,'nebula','用户下单不支付','>4 in 30min no pay','1542255171782','online',1504094102361,1504094102361,1502889958243,1564925159000,1542255279490,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"distinct orderid\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"0 paystatus\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"HOLDER\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0b\\u5355\\u4e0d\\u652f\\u4ed8\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1504094102361, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">4 in 30min no pay\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u4e0b\\u5355\\u4e0d\\u652f\\u4ed8\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504094102361}',0,'下单不支付',0,'ORDER',2),(86,'nebula','用户关联多个IP','>5 in 5m','1542255171782','online',1503901098133,1503901098133,1484044813003,1641120013785,1542255263774,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__account_dynamic_distinct_count_ip__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484044813003, \"endeffect\": 1641120013785, \"modifytime\": 1503901098133, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u5173\\u8054\\u591a\\u4e2aIP\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503901098133}',0,'高频关联',0,'ACCOUNT',2),(87,'nebula','用户关联多个IP地域','>2 in 5m','1542255171782','online',1503900592547,1503900592547,1484045572235,1609584772891,1542255263791,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__account_dynamic_distinct_count_geo_city__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484045572235, \"endeffect\": 1609584772891, \"modifytime\": 1503900592547, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 in 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u5173\\u8054\\u591a\\u4e2aIP\\u5730\\u57df\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503900592547}',0,'高频关联',0,'ACCOUNT',2),(88,'nebula','用户关联多个设备','>2 in 5m','1542255171782','online',1503901374606,1503901374606,1484044813003,1641120013785,1542255263811,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"contain\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \".\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"c_ip\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__account_dynamic_distinct_count_did__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484044813003, \"endeffect\": 1641120013785, \"modifytime\": 1503901374606, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 in 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u5173\\u8054\\u591a\\u4e2a\\u8bbe\\u5907\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503901374606}',0,'高频关联',0,'ACCOUNT',2),(89,'nebula','用户在多个IP请求注册','>2 ip in 10m','1542255171782','online',1504094832686,1504094832686,1484042234738,1641031035299,1542255263827,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1504094832686, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 ip in 10m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u5728\\u591a\\u4e2aIP\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504094832686}',0,'关联注册',0,'ACCOUNT',2),(90,'nebula','用户在多个IP请求登录','>2 ip in 10min','1542255171782','online',1503566234119,1503566234119,1484040852259,1641116053528,1542255263841,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503566234119, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 ip in 10min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u5728\\u591a\\u4e2aIP\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503566234119}',0,'关联登录',0,'ACCOUNT',2),(91,'nebula','用户在多个设备请求注册','>2 ip in 10m','1542255171782','online',1504095024844,1504095024844,1484042234738,1641031035299,1542255263858,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"did\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1504095024844, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 ip in 10m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u5728\\u591a\\u4e2a\\u8bbe\\u5907\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504095024844}',0,'关联注册',0,'ACCOUNT',2),(92,'nebula','用户在多个设备请求登录','>2 did in 10min','1542255171782','online',1503566297606,1503566297606,1484040852259,1641116053528,1542255263871,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"did\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503566297606, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 did in 10min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u5728\\u591a\\u4e2a\\u8bbe\\u5907\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503566297606}',0,'关联登录',0,'ACCOUNT',2),(93,'nebula','用户多IP请求下单','>1 ip in 30min','1542255171782','online',1503634351360,1503634351360,1502889958243,1564925159000,1542255279508,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634351360, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">1 ip in 30min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591aIP\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634351360}',0,'关联下单',0,'ORDER',2),(94,'nebula','用户多次取消订单','>3 in 30min distinct orderid','1542255171782','online',1503906729052,1503906729052,1502889958243,1564925159000,1542255279520,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_CANCEL\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_CANCEL\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_CANCEL\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u53d6\\u6d88\\u8ba2\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503906729052, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 in 30min distinct orderid\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u53d6\\u6d88\\u8ba2\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503906729052}',0,'取消订单',0,'ORDER',2),(95,'nebula','用户多次登录失败','>3 in 10min T','1542255171782','online',1503566517764,1503566517764,1484040852259,1641116053528,1542255263897,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"F\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"F\", \"left\": \"result\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503566517764, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3 in 10min T\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u767b\\u5f55\\u5931\\u8d25\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503566517764}',0,'高频登录',0,'ACCOUNT',2),(96,'nebula','用户多次登录成功','>3 in 10min T','1542255171782','online',1503566390905,1503566390905,1484040852259,1641116053528,1542255263915,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"T\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"T\", \"left\": \"result\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503566390905, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3 in 10min T\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u767b\\u5f55\\u6210\\u529f\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503566390905}',0,'高频登录',0,'ACCOUNT',2),(97,'nebula','用户多次请求下单','>5 in 30min','1542255171782','online',1503633559713,1503633559713,1502889958243,1564925159000,1542255279545,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503633559713, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 30min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503633559713}',0,'高频下单',0,'ORDER',2),(98,'nebula','用户多次请求下单__不同商品','>2 in 1h, product_id','1542255171782','online',1504159294362,1504159294362,1482826795423,1545898796395,1542255279558,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"product_id\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159294362, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, product_id\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5546\\u54c1\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159294362}',0,'不同下单',0,'ORDER',2),(99,'nebula','用户多次请求下单__不同商户','>2 in 1h, merchant','1542255171782','online',1504159405999,1504159405999,1482826795423,1545898796395,1542255279584,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"merchant\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159405999, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, merchant\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5546\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159405999}',0,'不同下单',0,'ORDER',2),(100,'nebula','用户多次请求下单__不同地址','>2 in 1h, receiver_address_detail','1542255171782','online',1504159032547,1504159032547,1482826795423,1545898796395,1542255279597,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_detail\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159032547, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_address_detail\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5730\\u5740\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159032547}',0,'不同下单',0,'ORDER',2),(101,'nebula','用户多次请求下单__不同城市','>2 in 1h, receiver_address_city ','1542255171782','online',1504158956300,1504158956300,1482826795423,1545898796395,1542255279613,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_city\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504158956300, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_address_city \", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u57ce\\u5e02\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504158956300}',0,'不同下单',0,'ORDER',2),(102,'nebula','用户多次请求下单__不同手机号','>2 in 1h, receiver_mobile','1542255171782','online',1504159501889,1504159501889,1482826795423,1545898796395,1542255279629,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_mobile\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159501889, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_mobile\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u624b\\u673a\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159501889}',0,'不同下单',0,'ORDER',2),(103,'nebula','用户多次请求下单__不同收货人','>2 in 1h, user_name','1542255171782','online',1504159262177,1504159262177,1482826795423,1545898796395,1542255279644,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"user_name\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159262177, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, user_name\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u6536\\u8d27\\u4eba\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159262177}',0,'不同下单',0,'ORDER',2),(104,'nebula','用户多次请求下单__不同金额','>2 in 1h, order_money_amount','1542255171782','online',1504159569284,1504159569284,1482826795423,1545898796395,1542255279660,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_money_amount\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159569284, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, order_money_amount\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u91d1\\u989d\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159569284}',0,'不同下单',0,'ORDER',2),(105,'nebula','用户多次请求下单__同一商品','>5 in 1h, product_id','1542255171782','online',1504075705221,1504075705221,1482826795423,1545898796395,1542255279680,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"product_id\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504075705221, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, product_id\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5546\\u54c1\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504075705221}',0,'单一下单',0,'ORDER',2),(106,'nebula','用户多次请求下单__同一商户','>5 in 1h, merchant ','1542255171782','online',1504075681076,1504075681076,1482826795423,1545898796395,1542255279695,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"merchant\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504075681076, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, merchant \", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5546\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504075681076}',0,'单一下单',0,'ORDER',2),(107,'nebula','用户多次请求下单__同一地址','>5 in 1h, receiver_address_detail','1542255171782','online',1504169026541,1504169026541,1482826795423,1545898796395,1542255279710,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_detail\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504169026541, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_address_detail\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5730\\u5740\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504169026541}',0,'单一下单',0,'ORDER',2),(108,'nebula','用户多次请求下单__同一城市','>5 in 1h, receiver_address_city ','1542255171782','online',1504151273819,1504151273819,1482826795423,1545898796395,1542255279725,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_city\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504151273819, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_address_city \", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u57ce\\u5e02\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504151273819}',0,'单一下单',0,'ORDER',2),(109,'nebula','用户多次请求下单__同手机号','>5 in 1h, receiver_mobile','1542255171782','online',1504158815830,1504158815830,1482826795423,1545898796395,1542255279737,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_mobile\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504158815830, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_mobile\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u624b\\u673a\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504158815830}',0,'单一下单',0,'ORDER',2),(110,'nebula','用户多次请求下单__同收货人','>5 in 1h, user_name','1542255171782','online',1504075736601,1504075736601,1482826795423,1545898796395,1542255279774,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"user_name\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504075736601, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, user_name\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u6536\\u8d27\\u4eba\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504075736601}',0,'单一下单',0,'ORDER',2),(111,'nebula','用户多次请求下单__金额较低','>5 in 1h, order_money_amount<= 100','1542255171782','online',1504152451257,1504152451257,1482826795423,1545898796395,1542255279786,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u91d1\\u989d\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"order_money_amount\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u6b21\\u6570\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"100\", \"left\": \"order_money_amount\", \"op\": \"<=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504152451257, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, order_money_amount<= 100\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u91d1\\u989d\\u8f83\\u4f4e\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504152451257}',0,'单一下单',0,'ORDER',2),(112,'nebula','用户多次请求下单__金额较高','>5 in 1h, order_money_amount > 100','1542255171782','online',1504159641874,1504159641874,1482826795423,1545898796395,1542255279799,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u91d1\\u989d\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"order_money_amount\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u6b21\\u6570\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"100\", \"left\": \"order_money_amount\", \"op\": \">\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159641874, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, order_money_amount > 100\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u91d1\\u989d\\u8f83\\u9ad8\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159641874}',0,'单一下单',0,'ORDER',2),(113,'nebula','用户多次请求注册','>2 in 5m','1542255171782','online',1504493674112,1504493674112,1484042234738,1641031035299,1542255263931,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1504493674112, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 in 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504493674112}',0,'高频注册',0,'ACCOUNT',2),(114,'nebula','用户多次请求登录','>3 in 5min','1542255171782','online',1503566031055,1503566031055,1484040852259,1641116053528,1542255263946,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503566031055, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3 in 5min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u6b21\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503566031055}',0,'高频登录',0,'ACCOUNT',2),(115,'nebula','用户多设备请求下单','>1 ip in 30min','1542255171782','online',1503634747252,1503634747252,1502889958243,1564925159000,1542255279817,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"did\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634747252, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">1 ip in 30min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u591a\\u8bbe\\u5907\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634747252}',0,'关联下单',0,'ORDER',2),(116,'nebula','用户换密码登录','>2 密码 in 10min','1542255171782','online',1503566595709,1503566595709,1484040852259,1641116053528,1542255263964,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"password\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503566595709, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 \\u5bc6\\u7801 in 10min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u6362\\u5bc6\\u7801\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503566595709}',0,'高频登录',0,'ACCOUNT',2),(117,'nebula','用户深夜多次请求下单','>5 in 1h, 0~6','1542255171782','online',1503906575576,1503906575576,1484031286167,1641106486953,1542255279829,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"time\", \"config\": {\"start\": \"01:00\", \"end\": \"06:06\"}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5348\\u591c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1484031286167, \"endeffect\": 1641106486953, \"modifytime\": 1503906575576, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, 0~6\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u6df1\\u591c\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503906575576}',0,'午夜下单',0,'ORDER',2),(118,'nebula','用户深夜请求下单金额过大','>2,000, 0~6','1542255171782','online',1503907294060,1503907294060,1484030778584,1609569979438,1542255279852,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2000\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"order_money_amount\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"time\", \"config\": {\"start\": \"00:00\", \"end\": \"06:00\"}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5348\\u591c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1484030778584, \"endeffect\": 1609569979438, \"modifytime\": 1503907294060, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2,000, 0~6\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u6df1\\u591c\\u8bf7\\u6c42\\u4e0b\\u5355\\u91d1\\u989d\\u8fc7\\u5927\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503907294060}',0,'午夜下单',0,'ORDER',2),(119,'nebula','用户相同密码请求登录','>2, 1密码 in 10min','1542255171782','online',1503566664128,1503566664128,1484040852259,1641116053528,1542255263981,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u767b\\u5f55\\u6b21\\u6570\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u76f8\\u540c\\u5bc6\\u7801\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"password\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503566664128, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2, 1\\u5bc6\\u7801 in 10min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u76f8\\u540c\\u5bc6\\u7801\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503566664128}',0,'高频登录',0,'ACCOUNT',2),(120,'nebula','用户请求A一段时间内没有请求B','延迟判断 5m','1542255171782','online',1504075287584,1504075287584,1504075128120,1627799928000,1542255263996,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"A\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"A\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"sleep\", \"config\": {\"duration\": 5, \"unit\": \"m\"}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"B\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"B\", \"left\": \"page\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u8df3\\u8dc3\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1504075128120, \"endeffect\": 1627799928000, \"modifytime\": 1504075287584, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \"\\u5ef6\\u8fdf\\u5224\\u65ad 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u8bf7\\u6c42A\\u4e00\\u6bb5\\u65f6\\u95f4\\u5185\\u6ca1\\u6709\\u8bf7\\u6c42B\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504075287584}',0,'跳跃访问',0,'ACCOUNT',2),(121,'nebula','用户请求下单__金额较大5m','>1000 in 5m','1542255171782','online',1504161162271,1504161162271,1484031441863,1641020242748,1542255279889,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$ \"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1000\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_submit_avg_order_money_amount__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8a\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1484031441863, \"endeffect\": 1641020242748, \"modifytime\": 1504161162271, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">1000 in 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u8bf7\\u6c42\\u4e0b\\u5355__\\u91d1\\u989d\\u8f83\\u59275m\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504161162271}',0,'特殊下单',0,'ORDER',2),(122,'nebula','用户请求下单行为单一','>3, <=4页面  in 30min','1542255171782','online',1503634099930,1503634099930,1502889958243,1564925159000,1542255279903,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"page\"], \"groupby\": [\"uid\"], \"condition\": [{\"right\": \"uid\", \"left\": \"uid\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634099930, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3, <=4\\u9875\\u9762  in 30min\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u8bf7\\u6c42\\u4e0b\\u5355\\u884c\\u4e3a\\u5355\\u4e00\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634099930}',0,'高频下单',0,'ORDER',2),(123,'nebula','用户高频请求下单__不同城市5m','>3 order, >1 receiver_geo','1542255171782','online',1504161070335,1504161070335,1484034056700,1672472457461,1542255279916,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_submit_count__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_distinct_count_receiver_geo_city__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8a\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1484034056700, \"endeffect\": 1672472457461, \"modifytime\": 1504161070335, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 order, >1 receiver_geo\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u9ad8\\u9891\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u57ce\\u5e025m\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504161070335}',0,'特殊下单',0,'ORDER',2),(124,'nebula','用户高频请求下单__全部失败5m','>3 order, F=1 in 5m','1542255171782','online',1504161126876,1504161126876,1484030263640,1672468664362,1542255279933,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_submit_fail_ratio__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_submit_count__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8a\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1484030263640, \"endeffect\": 1672468664362, \"modifytime\": 1504161126876, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 order, F=1 in 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u9ad8\\u9891\\u8bf7\\u6c42\\u4e0b\\u5355__\\u5168\\u90e8\\u5931\\u8d255m\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504161126876}',0,'特殊下单',0,'ORDER',2),(125,'nebula','用户高频请求下单__同一商户5m','>2 in 5m, merchant','1542255171782','online',1504075815026,1504075815026,1484037402744,1641026203555,1542255279952,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$ \"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_submit_distinct_count_merchant__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_submit_count__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8a\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1484037402744, \"endeffect\": 1641026203555, \"modifytime\": 1504075815026, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 5m, merchant\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u9ad8\\u9891\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5546\\u62375m\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504075815026}',0,'特殊下单',0,'ORDER',2),(126,'nebula','用户高频请求取消订单5m','>3 cancel in 5m','1542255171782','online',1504161196203,1504161196203,1484035529369,1704528330197,1542255279974,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_CANCEL\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"uid__order_cancel_count__5m__rt\"], \"trigger\": {\"keys\": [\"uid\"], \"event\": [\"nebula\", \"ORDER_CANCEL\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"USER\", \"decision\": \"review\", \"checkvalue\": \"uid\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u7279\\u6b8a\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1484035529369, \"endeffect\": 1704528330197, \"modifytime\": 1504161196203, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 cancel in 5m\", \"isLock\": false, \"name\": \"\\u7528\\u6237\\u9ad8\\u9891\\u8bf7\\u6c42\\u53d6\\u6d88\\u8ba2\\u53555m\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504161196203}',0,'特殊下单',0,'ORDER',2),(127,'nebula','设备下单不支付','>4 in 30min no pay','1542255171782','online',1504094095324,1504094095324,1502889958243,1564925159000,1542255280011,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"distinct orderid\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"0 paystatus\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"HOLDER\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0b\\u5355\\u4e0d\\u652f\\u4ed8\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1504094095324, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">4 in 30min no pay\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u4e0b\\u5355\\u4e0d\\u652f\\u4ed8\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504094095324}',0,'下单不支付',0,'ORDER',2),(128,'nebula','设备使用相同邀请码注册','>3 register_count, 1 register_channel in 1h','1542255171782','online',1504493976438,1504493976438,1484042007770,1609667608438,1542255264016,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"did\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"register_channel\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"register_channel\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"^\\\\s*$\", \"op\": \"!regex\", \"left\": \"register_channel\"}, {\"right\": \"did\", \"op\": \"=\", \"left\": \"did\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9080\\u8bf7\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042007770, \"endeffect\": 1609667608438, \"modifytime\": 1504493976438, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3 register_count, 1 register_channel in 1h\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u4f7f\\u7528\\u76f8\\u540c\\u9080\\u8bf7\\u7801\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504493976438}',0,'邀请注册',0,'ACCOUNT',2),(129,'nebula','设备使用相同邀请码注册5m','>2 register_count, same register_channel in 5m','1542255171782','online',1504493965218,1504493965218,1484042007770,1609667608438,1542255264039,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"did\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_regist_count__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"register_channel\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"^\\\\s*$\", \"op\": \"!regex\", \"left\": \"register_channel\"}, {\"right\": \"did\", \"op\": \"=\", \"left\": \"did\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9080\\u8bf7\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042007770, \"endeffect\": 1609667608438, \"modifytime\": 1504493965218, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 register_count, same register_channel in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u4f7f\\u7528\\u76f8\\u540c\\u9080\\u8bf7\\u7801\\u6ce8\\u518c5m\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504493965218}',0,'邀请注册',0,'ACCOUNT',2),(130,'nebula','设备关联多个IP','>5 in 5m','1542255171782','online',1503900534979,1503900534979,1484046005513,1641121214738,1542255264058,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"did\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_dynamic_distinct_count_ip__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484046005513, \"endeffect\": 1641121214738, \"modifytime\": 1503900534979, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u5173\\u8054\\u591a\\u4e2aIP\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503900534979}',0,'高频关联',0,'ACCOUNT',2),(131,'nebula','设备关联多个IP地域','>2 in 5m','1542255171782','online',1503900477309,1503900477309,1484043201651,1672568002539,1542255264079,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"did\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_dynamic_distinct_count_geo_city__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484043201651, \"endeffect\": 1672568002539, \"modifytime\": 1503900477309, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u5173\\u8054\\u591a\\u4e2aIP\\u5730\\u57df\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503900477309}',0,'高频关联',0,'ACCOUNT',2),(132,'nebula','设备关联多个用户','>2 in 5m','1542255171782','online',1503901233001,1503901233001,1484044375482,1641119576127,1542255264094,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"did\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_dynamic_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u5173\\u8054\"], \"app\": \"nebula\", \"starteffect\": 1484044375482, \"endeffect\": 1641119576127, \"modifytime\": 1503901233001, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u5173\\u8054\\u591a\\u4e2a\\u7528\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503901233001}',0,'高频关联',0,'ACCOUNT',2),(133,'nebula','设备在多个IP请求注册','>2 ip in 10m','1542255171782','online',1503474972106,1503474972106,1484042234738,1641031035299,1542255264112,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503474972106, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 ip in 10m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u5728\\u591a\\u4e2aIP\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503474972106}',0,'关联注册',0,'ACCOUNT',2),(134,'nebula','设备在多个IP请求登录','>5设备 in 5min','1542255171782','online',1503568090144,1503568090144,1484040852259,1641116053528,1542255264132,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503568090144, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5\\u8bbe\\u5907 in 5min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u5728\\u591a\\u4e2aIP\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503568090144}',0,'关联登录',0,'ACCOUNT',2),(135,'nebula','设备多IP请求下单','>1 ip in 30min','1542255171782','online',1503634524815,1503634524815,1502889958243,1564925159000,1542255280054,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634524815, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">1 ip in 30min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591aIP\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634524815}',0,'关联下单',0,'ORDER',2),(136,'nebula','设备多个用户请求注册','>2 uid in 10m','1542255171782','online',1504174259542,1504174259542,1484042234738,1641031035299,1542255264149,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"uid\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1504174259542, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">2 uid in 10m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u4e2a\\u7528\\u6237\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504174259542}',0,'关联注册',0,'ACCOUNT',2),(137,'nebula','设备多次使用相同密码注册','>3, 1密码 in 5m','1542255171782','online',1503475179450,1503475179450,1484042523835,1672480924640,1542255264174,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_regist_distinct_count_password__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_regist_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042523835, \"endeffect\": 1672480924640, \"modifytime\": 1503475179450, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3, 1\\u5bc6\\u7801 in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u4f7f\\u7528\\u76f8\\u540c\\u5bc6\\u7801\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503475179450}',0,'高频注册',0,'ACCOUNT',2),(138,'nebula','设备多次取消订单','>3 in 30min distinct orderid','1542255171782','online',1503635408385,1503635408385,1502889958243,1564925159000,1542255280072,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_CANCEL\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_CANCEL\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_CANCEL\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u53d6\\u6d88\\u8ba2\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503635408385, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">3 in 30min distinct orderid\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u53d6\\u6d88\\u8ba2\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503635408385}',0,'取消订单',0,'ORDER',2),(139,'nebula','设备多次注册失败','>10 in 5m','1542255171782','online',1503386823987,1503386823987,1484042234738,1641031035299,1542255264231,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"F\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"F\", \"left\": \"result\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503386823987, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">10 in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u6ce8\\u518c\\u5931\\u8d25\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503386823987}',0,'高频注册',0,'ACCOUNT',2),(140,'nebula','设备多次注册成功','>10 in 5m','1542255171782','online',1503386864638,1503386864638,1484042234738,1641031035299,1542255264293,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"T\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"T\", \"left\": \"result\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503386864638, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">10 in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u6ce8\\u518c\\u6210\\u529f\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503386864638}',0,'高频注册',0,'ACCOUNT',2),(141,'nebula','设备多次登录失败','>5 in 10min F','1542255171782','online',1503565592900,1503565592900,1484040852259,1641116053528,1542255264342,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"F\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"F\", \"left\": \"result\", \"op\": \"==\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565592900, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 10min F\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u767b\\u5f55\\u5931\\u8d25\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565592900}',0,'高频登录',0,'ACCOUNT',2),(142,'nebula','设备多次登录成功','>5 in 10min T','1542255171782','online',1503565558496,1503565558496,1484040852259,1641116053528,1542255264393,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"T\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"result\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 600, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"T\", \"left\": \"result\", \"op\": \"==\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565558496, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 10min T\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u767b\\u5f55\\u6210\\u529f\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565558496}',0,'高频登录',0,'ACCOUNT',2),(143,'nebula','设备多次请求下单','>5 in 30min ','1542255171782','online',1503633789746,1503633789746,1502889958243,1564925159000,1542255280120,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503633789746, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 30min \", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503633789746}',0,'高频下单',0,'ORDER',2),(144,'nebula','设备多次请求下单__不同商品','>2 in 1h, product_id','1542255171782','online',1504160006478,1504160006478,1482826795423,1545898796395,1542255280171,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"product_id\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160006478, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, product_id\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5546\\u54c1\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160006478}',0,'不同下单',0,'ORDER',2),(145,'nebula','设备多次请求下单__不同商户','>2 in 1h, merchant','1542255171782','online',1504159885999,1504159885999,1482826795423,1545898796395,1542255280205,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"merchant\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159885999, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, merchant\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5546\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159885999}',0,'不同下单',0,'ORDER',2),(146,'nebula','设备多次请求下单__不同地址','>2 in 1h, receiver_address_detail','1542255171782','online',1504160027095,1504160027095,1482826795423,1545898796395,1542255280218,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_detail\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160027095, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_address_detail\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u5730\\u5740\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160027095}',0,'不同下单',0,'ORDER',2),(147,'nebula','设备多次请求下单__不同城市','>2 in 1h, receiver_address_city ','1542255171782','online',1504159910772,1504159910772,1482826795423,1545898796395,1542255280233,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_city\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159910772, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_address_city \", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u57ce\\u5e02\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159910772}',0,'不同下单',0,'ORDER',2),(148,'nebula','设备多次请求下单__不同手机号','>2 in 1h, receiver_mobile','1542255171782','online',1504159827274,1504159827274,1482826795423,1545898796395,1542255280252,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_mobile\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159827274, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, receiver_mobile\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u624b\\u673a\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159827274}',0,'不同下单',0,'ORDER',2),(149,'nebula','设备多次请求下单__不同收货人','>2 in 1h, user_name','1542255171782','online',1504160020591,1504160020591,1482826795423,1545898796395,1542255280267,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"user_name\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504160020591, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, user_name\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u6536\\u8d27\\u4eba\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504160020591}',0,'不同下单',0,'ORDER',2),(150,'nebula','设备多次请求下单__不同金额','>2 in 1h, order_money_amount','1542255171782','online',1504159863459,1504159863459,1482826795423,1545898796395,1542255280283,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"2\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_money_amount\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u4e0d\\u540c\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159863459, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">2 in 1h, order_money_amount\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u4e0d\\u540c\\u91d1\\u989d\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159863459}',0,'不同下单',0,'ORDER',2),(151,'nebula','设备多次请求下单__同一商品','>5 in 1h, product_id','1542255171782','online',1504155376144,1504155376144,1482826795423,1545898796395,1542255280301,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"product_id\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155376144, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, product_id\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5546\\u54c1\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155376144}',0,'单一下单',0,'ORDER',2),(152,'nebula','设备多次请求下单__同一商户','>5 in 1h, merchant','1542255171782','online',1504155424594,1504155424594,1482826795423,1545898796395,1542255280319,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"merchant\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155424594, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, merchant\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5546\\u6237\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155424594}',0,'单一下单',0,'ORDER',2),(153,'nebula','设备多次请求下单__同一地址','>5 in 1h, user_name','1542255171782','online',1504169101871,1504169101871,1482826795423,1545898796395,1542255280335,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"user_name\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504169101871, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, user_name\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u5730\\u5740\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504169101871}',0,'单一下单',0,'ORDER',2),(154,'nebula','设备多次请求下单__同一城市','>5 in 1h, receiver_address_city','1542255171782','online',1504155576695,1504155576695,1482826795423,1545898796395,1542255280351,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_address_city\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155576695, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_address_city\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u4e00\\u57ce\\u5e02\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155576695}',0,'单一下单',0,'ORDER',2),(155,'nebula','设备多次请求下单__同手机号','>5 in 1h, receiver_mobile','1542255171782','online',1504158893635,1504158893635,1482826795423,1545898796395,1542255280363,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"receiver_mobile\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504158893635, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, receiver_mobile\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u624b\\u673a\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504158893635}',0,'单一下单',0,'ORDER',2),(156,'nebula','设备多次请求下单__同收货人','>5 in 1h, user_name','1542255171782','online',1504155458788,1504155458788,1482826795423,1545898796395,1542255280421,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"uid\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"user_name\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155458788, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, user_name\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u540c\\u6536\\u8d27\\u4eba\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155458788}',0,'单一下单',0,'ORDER',2),(157,'nebula','设备多次请求下单__金额较低','>5 in 1h, order_money_amount<= 100','1542255171782','online',1504155334322,1504155334322,1482826795423,1545898796395,1542255280458,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u91d1\\u989d\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"order_money_amount\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u6b21\\u6570\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"100\", \"left\": \"order_money_amount\", \"op\": \"<=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504155334322, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, order_money_amount<= 100\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u91d1\\u989d\\u8f83\\u4f4e\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504155334322}',0,'单一下单',0,'ORDER',2),(158,'nebula','设备多次请求下单__金额较高','>5 in 1h, order_money_amount > 100','1542255171782','online',1504159707445,1504159707445,1482826795423,1545898796395,1542255280498,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u91d1\\u989d\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"100\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"order_money_amount\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\\u6b21\\u6570\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 3600, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}, {\"right\": \"100\", \"left\": \"order_money_amount\", \"op\": \">\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5355\\u4e00\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1482826795423, \"endeffect\": 1545898796395, \"modifytime\": 1504159707445, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">5 in 1h, order_money_amount > 100\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u4e0b\\u5355__\\u91d1\\u989d\\u8f83\\u9ad8\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504159707445}',0,'单一下单',0,'ORDER',2),(159,'nebula','设备多次请求注册','>10 in 5m','1542255171782','online',1503386785709,1503386785709,1484042234738,1641031035299,1542255264453,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"10\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1503386785709, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">10 in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u6ce8\\u518c\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503386785709}',0,'高频注册',0,'ACCOUNT',2),(160,'nebula','设备多次请求登录','>5 in 5min','1542255171782','online',1503565493278,1503565493278,1484040852259,1641116053528,1542255264501,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_login_count__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565493278, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u6b21\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565493278}',0,'高频登录',0,'ACCOUNT',2),(161,'nebula','设备多用户请求下单','>1 用户 in 30min','1542255171782','online',1503634683609,1503634683609,1502889958243,1564925159000,1542255280515,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"uid\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634683609, \"score\": 0, \"category\": \"ORDER\", \"remark\": \">1 \\u7528\\u6237 in 30min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u7528\\u6237\\u8bf7\\u6c42\\u4e0b\\u5355\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634683609}',0,'关联下单',0,'ORDER',2),(162,'nebula','设备多用户请求登录','>5用户 in 5min','1542255171782','online',1503567812814,1503567812814,1484040852259,1641116053528,1542255264560,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"uid\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u5173\\u8054\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503567812814, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5\\u7528\\u6237 in 5min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u591a\\u7528\\u6237\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503567812814}',0,'关联登录',0,'ACCOUNT',2),(163,'nebula','设备换密码请求登录单账号','>5 in 5min','1542255171782','online',1503565799399,1503565799399,1484040852259,1641116053528,1542255264628,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_login_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_login_distinct_count_password__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565799399, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 5min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u6362\\u5bc6\\u7801\\u8bf7\\u6c42\\u767b\\u5f55\\u5355\\u8d26\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565799399}',0,'高频登录',0,'ACCOUNT',2),(164,'nebula','设备相同密码请求登录不同账号','>3 in 5min','1542255171782','online',1503565858551,1503565858551,1484040852259,1641116053528,1542255264672,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_login_distinct_count_uid__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"1\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"getvariable\", \"config\": {\"variable\": [\"nebula\", \"did__account_login_distinct_count_password__5m__rt\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565858551, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">3 in 5min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u76f8\\u540c\\u5bc6\\u7801\\u8bf7\\u6c42\\u767b\\u5f55\\u4e0d\\u540c\\u8d26\\u53f7\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565858551}',0,'高频登录',0,'ACCOUNT',2),(165,'nebula','设备请求A一段时间内没有请求B','延迟判断 5m','1542255171782','online',1504075297745,1504075297745,1504075128120,1627799928000,1542255264693,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"A\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"A\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"sleep\", \"config\": {\"duration\": 5, \"unit\": \"m\"}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"B\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"HTTP_DYNAMIC\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"B\", \"left\": \"page\", \"op\": \"==\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u8df3\\u8dc3\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1504075128120, \"endeffect\": 1627799928000, \"modifytime\": 1504075297745, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \"\\u5ef6\\u8fdf\\u5224\\u65ad 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u8bf7\\u6c42A\\u4e00\\u6bb5\\u65f6\\u95f4\\u5185\\u6ca1\\u6709\\u8bf7\\u6c42B\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504075297745}',0,'跳跃访问',0,'ACCOUNT',2),(166,'nebula','设备请求下单行为单一','>3, <=4页面  in 30min','1542255171782','online',1503634070945,1503634070945,1502889958243,1564925159000,1542255280570,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"3\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ORDER_SUBMIT\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"order_id\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ORDER_SUBMIT\"]}, \"operand\": [\"page\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ORDER\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 3600}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u4e0b\\u5355\"], \"app\": \"nebula\", \"starteffect\": 1502889958243, \"endeffect\": 1564925159000, \"modifytime\": 1503634070945, \"score\": 1, \"category\": \"ORDER\", \"remark\": \">3, <=4\\u9875\\u9762  in 30min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u8bf7\\u6c42\\u4e0b\\u5355\\u884c\\u4e3a\\u5355\\u4e00\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503634070945}',1,'高频下单',0,'ORDER',2),(167,'nebula','设备请求注册前未访问必要资源','register, no xxx in 5m','1542255171782','online',1504002540668,1504002540668,1504001710079,1627812910000,1542255264711,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"HOLDER\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u8df3\\u8dc3\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1504001710079, \"endeffect\": 1627812910000, \"modifytime\": 1504002540668, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \"register, no xxx in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u8bf7\\u6c42\\u6ce8\\u518c\\u524d\\u672a\\u8bbf\\u95ee\\u5fc5\\u8981\\u8d44\\u6e90\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504002540668}',0,'跳跃访问',0,'ACCOUNT',2),(168,'nebula','设备请求登录前未访问必要资源','login, no xxx in 5m','1542255171782','online',1504002378601,1504002378601,1504001710079,1627812910000,1542255264724,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"==\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"0\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 300, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"HOLDER\", \"left\": \"page\", \"op\": \"contain\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u8df3\\u8dc3\\u8bbf\\u95ee\"], \"app\": \"nebula\", \"starteffect\": 1504001710079, \"endeffect\": 1627812910000, \"modifytime\": 1504002378601, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \"login, no xxx in 5m\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u8bf7\\u6c42\\u767b\\u5f55\\u524d\\u672a\\u8bbf\\u95ee\\u5fc5\\u8981\\u8d44\\u6e90\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504002378601}',0,'跳跃访问',0,'ACCOUNT',2),(169,'nebula','设备集中请求注册接口','>5 in 30m, 动态<=4','1542255171782','online',1504174026989,1504174026989,1484042234738,1641031035299,1542255264748,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ACCOUNT_REGISTRATION\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"distinct page <=4\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"did\"], \"event\": [\"nebula\", \"ACCOUNT_REGISTRATION\"]}, \"operand\": [\"page\"], \"groupby\": [\"did\"], \"condition\": [{\"right\": \"did\", \"left\": \"did\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"DeviceID\", \"decision\": \"review\", \"checkvalue\": \"did\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u6ce8\\u518c\"], \"app\": \"nebula\", \"starteffect\": 1484042234738, \"endeffect\": 1641031035299, \"modifytime\": 1504174026989, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 in 30m, \\u52a8\\u6001<=4\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u96c6\\u4e2d\\u8bf7\\u6c42\\u6ce8\\u518c\\u63a5\\u53e3\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1504174026989}',0,'高频注册',0,'ACCOUNT',2),(170,'nebula','设备集中请求登录','>5 ，页面<=4 in 30min','1542255171782','online',1503565737736,1503565737736,1484040852259,1641116053528,1542255264775,'{\"status\": \"online\", \"terms\": [{\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"!regex\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"^\\\\s*$\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"\", \"config\": {\"field\": \"page\", \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"type\": \"event\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \">\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"5\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"ACCOUNT_LOGIN\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"c_ip\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}, {\"right\": \"^\\\\s*$\", \"left\": \"page\", \"op\": \"!regex\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"<=\", \"right\": {\"subtype\": \"\", \"config\": {\"value\": \"4\"}, \"type\": \"constant\"}, \"left\": {\"subtype\": \"count\", \"config\": {\"algorithm\": \"distinct_count\", \"interval\": 1800, \"sourceevent\": [\"nebula\", \"HTTP_DYNAMIC\"], \"trigger\": {\"keys\": [\"c_ip\"], \"event\": [\"nebula\", \"ACCOUNT_LOGIN\"]}, \"operand\": [\"page\"], \"groupby\": [\"c_ip\"], \"condition\": [{\"right\": \"c_ip\", \"left\": \"c_ip\", \"op\": \"=\"}]}, \"type\": \"func\"}}, {\"scope\": \"realtime\", \"remark\": \"\", \"op\": \"\", \"right\": null, \"left\": {\"subtype\": \"setblacklist\", \"config\": {\"remark\": \"\", \"name\": \"ACCOUNT\", \"checktype\": \"IP\", \"decision\": \"review\", \"checkvalue\": \"c_ip\", \"checkpoints\": \"\", \"ttl\": 300}, \"type\": \"func\"}}], \"tags\": [\"\\u9ad8\\u9891\\u767b\\u5f55\"], \"app\": \"nebula\", \"starteffect\": 1484040852259, \"endeffect\": 1641116053528, \"modifytime\": 1503565737736, \"score\": 0, \"category\": \"ACCOUNT\", \"remark\": \">5 \\uff0c\\u9875\\u9762<=4 in 30min\", \"isLock\": false, \"name\": \"\\u8bbe\\u5907\\u96c6\\u4e2d\\u8bf7\\u6c42\\u767b\\u5f55\", \"version\": 1542255171782, \"group_id\": 2, \"createtime\": 1503565737736}',0,'高频登录',0,'ACCOUNT',2);
/*!40000 ALTER TABLE `strategy_cust` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `tags`
--

DROP TABLE IF EXISTS `tags`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `tags` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=16 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `tags`
--

LOCK TABLES `tags` WRITE;
/*!40000 ALTER TABLE `tags` DISABLE KEYS */;
INSERT INTO `tags` VALUES (1,'nebula','SQL注入',1477969984890),(2,'nebula','RFI',1477972713211),(3,'nebula','目录遍历',1477984766793),(4,'nebula','XSS',1477989738705),(5,'nebula','账号异常',1478157621134),(6,'nebula','恶意扫描',1478591836621),(7,'nebula','爬虫',1479353751140),(8,'nebula','羊毛党',1479355339864),(9,'nebula','撞库',1479697903265),(10,'nebula','ngx_lua_waf',1479698398247),(11,'nebula','恶意注册',1479699748722),(12,'nebula','其他',1479718105679),(13,'nebula','盗号',1479718152906),(14,'nebula','刷单',1482465287645),(15,'nebula','简历爬虫',1484030844254);
/*!40000 ALTER TABLE `tags` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `user`
--

DROP TABLE IF EXISTS `user`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `user` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `name` char(100) DEFAULT NULL,
  `password` char(100) DEFAULT NULL,
  `creator` int(11) DEFAULT NULL,
  `create_time` bigint(20) DEFAULT NULL,
  `last_login` bigint(20) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `is_active` int(11) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `user`
--

LOCK TABLES `user` WRITE;
/*!40000 ALTER TABLE `user` DISABLE KEYS */;
INSERT INTO `user` VALUES (1,'threathunter','dc9cd4558c3339f50e934ceb789a7467a0df874d',1,1480521600000,1542262895996,1480521600000,1),(2,'threathunter_test','dc9cd4558c3339f50e934ceb789a7467a0df874d',1,1480521600000,1542616563863,1481101774190,1),(3,'john','3f196cfb6c4cffe3002c0495a1bc822521b6aa36',2,1480918344222,1480918636611,1480918346238,1),(4,'adam','3f196cfb6c4cffe3002c0495a1bc822521b6aa36',2,1480918360255,1480918731595,1480918362410,1);
/*!40000 ALTER TABLE `user` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `user_group`
--

DROP TABLE IF EXISTS `user_group`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `user_group` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `user_id` int(11) DEFAULT NULL,
  `group_id` int(11) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `user_group`
--

LOCK TABLES `user_group` WRITE;
/*!40000 ALTER TABLE `user_group` DISABLE KEYS */;
INSERT INTO `user_group` VALUES (1,1,1,1480521600000),(2,2,2,1481101774242),(3,3,3,1480918346260),(4,4,4,1480918362444);
/*!40000 ALTER TABLE `user_group` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `variablemeta_cust`
--

DROP TABLE IF EXISTS `variablemeta_cust`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `variablemeta_cust` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `chinese_name` char(100) DEFAULT NULL,
  `module` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `dimension` char(100) DEFAULT NULL,
  `value_type` char(100) DEFAULT NULL,
  `src_variablesid` varchar(1000) DEFAULT NULL,
  `src_eventid` char(100) DEFAULT NULL,
  `priority` int(11) DEFAULT NULL,
  `properties` blob DEFAULT NULL,
  `expire` bigint(20) DEFAULT NULL,
  `ttl` int(11) DEFAULT NULL,
  `internal` int(11) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `fulldata` blob DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `variablemeta_cust`
--

LOCK TABLES `variablemeta_cust` WRITE;
/*!40000 ALTER TABLE `variablemeta_cust` DISABLE KEYS */;
/*!40000 ALTER TABLE `variablemeta_cust` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `variablemodel_cust`
--

DROP TABLE IF EXISTS `variablemodel_cust`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `variablemodel_cust` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `module` char(100) DEFAULT NULL,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `remark` varchar(255) DEFAULT NULL,
  `visible_name` char(100) DEFAULT NULL,
  `dimension` char(100) DEFAULT NULL,
  `status` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `value_type` char(100) DEFAULT NULL,
  `value_subtype` char(100) DEFAULT NULL,
  `value_category` char(100) DEFAULT NULL,
  `source` varchar(1000) DEFAULT NULL,
  `filter` varchar(4000) DEFAULT NULL,
  `period` varchar(100) DEFAULT NULL,
  `function` varchar(1000) DEFAULT NULL,
  `groupbykeys` varchar(1000) DEFAULT NULL,
  `hint` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `variablemodel_cust`
--

LOCK TABLES `variablemodel_cust` WRITE;
/*!40000 ALTER TABLE `variablemodel_cust` DISABLE KEYS */;
/*!40000 ALTER TABLE `variablemodel_cust` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Current Database: `nebula_data`
--

CREATE DATABASE /*!32312 IF NOT EXISTS*/ `nebula_data` /*!40100 DEFAULT CHARACTER SET latin1 */;

USE `nebula_data`;

--
-- Table structure for table `notice`
--

DROP TABLE IF EXISTS `notice`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `notice` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `timestamp` bigint(20) DEFAULT 0,
  `key` varchar(1000) NOT NULL,
  `strategy_name` char(100) NOT NULL,
  `scene_name` char(100) NOT NULL,
  `checkpoints` char(100) DEFAULT NULL,
  `check_type` char(100) NOT NULL,
  `decision` char(100) NOT NULL,
  `risk_score` int(11) DEFAULT 0,
  `expire` bigint(20) NOT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `variable_values` blob NOT NULL,
  `geo_province` char(100) DEFAULT NULL,
  `geo_city` char(100) DEFAULT NULL,
  `test` tinyint(1) DEFAULT 1,
  `tip` varchar(1000) DEFAULT NULL,
  `uri_stem` varchar(1000) DEFAULT NULL,
  `trigger_event` blob DEFAULT NULL,
  PRIMARY KEY (`id`),
  KEY `timestamp` (`timestamp`),
  KEY `timestamp_key` (`timestamp`,`key`(255)),
  KEY `expire` (`expire`)
) ENGINE=InnoDB AUTO_INCREMENT=547 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `notice`
--

LOCK TABLES `notice` WRITE;
/*!40000 ALTER TABLE `notice` DISABLE KEYS */;
/*!40000 ALTER TABLE `notice` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `notice_stat`
--

DROP TABLE IF EXISTS `notice_stat`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `notice_stat` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `timestamp` bigint(20) DEFAULT 0,
  `tsHour` bigint(20) DEFAULT 0,
  `key` varchar(1000) NOT NULL,
  `check_type` char(100) NOT NULL,
  `strategy_name` char(100) NOT NULL,
  `scene_name` char(100) NOT NULL,
  `decision` char(100) NOT NULL,
  `test` tinyint(1) DEFAULT 1,
  `tag` char(100) NOT NULL,
  `geo_city` char(100) DEFAULT NULL,
  `uri_stem` varchar(1000) DEFAULT NULL,
  `ip` char(20) DEFAULT NULL,
  `uid` varchar(512) DEFAULT NULL,
  `did` varchar(512) DEFAULT NULL,
  `count` int(11) NOT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`),
  KEY `timestamp` (`timestamp`)
) ENGINE=InnoDB AUTO_INCREMENT=438 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `notice_stat`
--

LOCK TABLES `notice_stat` WRITE;
/*!40000 ALTER TABLE `notice_stat` DISABLE KEYS */;
/*!40000 ALTER TABLE `notice_stat` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `risk_incident`
--

DROP TABLE IF EXISTS `risk_incident`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `risk_incident` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `ip` char(20) NOT NULL,
  `associated_events` varchar(1000) DEFAULT NULL,
  `start_time` bigint(20) NOT NULL,
  `strategies` varchar(2000) NOT NULL,
  `hit_tags` varchar(1000) NOT NULL,
  `risk_score` int(11) NOT NULL,
  `uri_stems` varchar(2000) NOT NULL,
  `hosts` varchar(1000) NOT NULL,
  `most_visited` varchar(1000) DEFAULT NULL,
  `peak` char(20) DEFAULT NULL,
  `dids` blob NOT NULL,
  `associated_users` blob NOT NULL,
  `users_count` int(11) NOT NULL,
  `associated_orders` varchar(1000) DEFAULT NULL,
  `status` int(11) DEFAULT 0,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`),
  KEY `start_time` (`start_time`)
) ENGINE=InnoDB AUTO_INCREMENT=99 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `risk_incident`
--

LOCK TABLES `risk_incident` WRITE;
/*!40000 ALTER TABLE `risk_incident` DISABLE KEYS */;
/*!40000 ALTER TABLE `risk_incident` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Current Database: `nebula_default`
--

CREATE DATABASE /*!32312 IF NOT EXISTS*/ `nebula_default` /*!40100 DEFAULT CHARACTER SET latin1 */;

USE `nebula_default`;

--
-- Table structure for table `config_default`
--

DROP TABLE IF EXISTS `config_default`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `config_default` (
  `configkey` char(200) NOT NULL,
  `configvalue` varchar(4000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`configkey`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `config_default`
--

LOCK TABLES `config_default` WRITE;
/*!40000 ALTER TABLE `config_default` DISABLE KEYS */;
INSERT INTO `config_default` VALUES ('alerting.delivery_interval','30',1542255150860),('alerting.email_topic','',1542255150880),('alerting.mail.base_url','http://nebula.hupu.com',1542255150933),('alerting.mail.sender','fugai@hupu.com',1542255150836),('alerting.mail.user','new',1542255150843),('alerting.nebula_address','',1542255150947),('alerting.send_email','',1542255150870),('alerting.smtp_account','',1542255150979),('alerting.smtp_password','',1542255150855),('alerting.smtp_port','',1542255150942),('alerting.smtp_server','',1542255150960),('alerting.smtp_ssl','1',1542255150865),('alerting.status','0',1542255150970),('alerting.to_emails','test@test.com,test2@test2.com',1542255150951),('did','sniffer.did.keyset',1542255150966),('filter.encryption.names','',1542255150992),('filter.encryption.salt','',1542255150910),('filter.log.added_suffixes','',1542255150938),('filter.log.client_ips','',1542255150997),('filter.log.domains','',1542255150927),('filter.log.ignored_suffixes','',1542255150905),('filter.log.logs','',1542255150884),('filter.log.server_ips','',1542255150874),('filter.log.suffixes','',1542255150975),('filter.traffic.client_ips','',1542255150988),('filter.traffic.domains','',1542255150896),('filter.traffic.server_ips','',1542255150983),('filter.traffic.server_ports','',1542255150956),('filter.traffic.urls','',1542255150888),('login.authentications','{\"database\":true}',1542255150901),('sniffer.did.keyset','did',1542255150850),('sniffer.uid.keyset','user_name',1542255150920),('user_name','sniffer.uid.keyset',1542255150914);
/*!40000 ALTER TABLE `config_default` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `eventmeta_default`
--

DROP TABLE IF EXISTS `eventmeta_default`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `eventmeta_default` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `derived` int(11) DEFAULT NULL,
  `src_variableid` char(100) DEFAULT NULL,
  `properties` blob DEFAULT NULL,
  `expire` bigint(20) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `config` blob DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `eventmeta_default`
--

LOCK TABLES `eventmeta_default` WRITE;
/*!40000 ALTER TABLE `eventmeta_default` DISABLE KEYS */;
/*!40000 ALTER TABLE `eventmeta_default` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `eventmodel_default`
--

DROP TABLE IF EXISTS `eventmodel_default`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `eventmodel_default` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `visible_name` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `source` varchar(1000) DEFAULT NULL,
  `version` char(100) DEFAULT NULL,
  `properties` varchar(8000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=18 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `eventmodel_default`
--

LOCK TABLES `eventmodel_default` WRITE;
/*!40000 ALTER TABLE `eventmodel_default` DISABLE KEYS */;
INSERT INTO `eventmodel_default` VALUES (1,'nebula','HTTP_DYNAMIC','动态资源请求','base','动态资源请求','[]','1.0','[{\"name\": \"c_ip\", \"type\": \"string\", \"visible_name\": \"\\u5ba2\\u6237\\u7aefip\", \"remark\": \"\\u5ba2\\u6237\\u7aefIP(\\u9ed8\\u8ba4\\u53d6xforward\\u6700\\u540e\\u4e00\\u4e2a)\"}, {\"name\": \"sid\", \"type\": \"string\", \"visible_name\": \"session\\u4f1a\\u8bddID\", \"remark\": \"session\\u4f1a\\u8bddID\"}, {\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237ID\", \"remark\": \"\\u7528\\u6237ID\"}, {\"name\": \"did\", \"type\": \"string\", \"visible_name\": \"\\u8bbe\\u5907ID\", \"remark\": \"\\u8bbe\\u5907ID\"}, {\"name\": \"platform\", \"type\": \"string\", \"visible_name\": \"\\u5ba2\\u6237\\u7aef\\u7c7b\\u578b\", \"remark\": \"\\u5ba2\\u6237\\u7aef\\u7c7b\\u578b\"}, {\"name\": \"page\", \"type\": \"string\", \"visible_name\": \"\\u4f2a\\u9759\\u6001\\u9875\\u9762\\u52a0\\u5de5\\u540e\\u5730\\u5740\", \"remark\": \"\\u4f2a\\u9759\\u6001\\u9875\\u9762\\u52a0\\u5de5\\u540e\\u5730\\u5740(\\u5168\\u90e8\\u5c0f\\u5199\\uff0c\\u53bb\\u7aef\\u53e3)\"}, {\"name\": \"c_port\", \"type\": \"long\", \"visible_name\": \"\\u5ba2\\u6237\\u7aef\\u7aef\\u53e3\", \"remark\": \"\\u5ba2\\u6237\\u7aef\\u7aef\\u53e3\"}, {\"name\": \"c_bytes\", \"type\": \"long\", \"visible_name\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u5927\\u5c0f\", \"remark\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u5927\\u5c0f\"}, {\"name\": \"c_body\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\", \"remark\": \"\\u8bf7\\u6c42\\u5185\\u5bb9(json\\u548cform\\u8868\\u5355\\u8131\\u654f)\"}, {\"name\": \"c_type\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u7c7b\\u578b\", \"remark\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u7c7b\\u578b\"}, {\"name\": \"s_ip\", \"type\": \"string\", \"visible_name\": \"\\u670d\\u52a1\\u7aefIP\", \"remark\": \"\\u670d\\u52a1\\u7aefIP\"}, {\"name\": \"s_port\", \"type\": \"long\", \"visible_name\": \"\\u670d\\u52a1\\u7aef\\u7aef\\u53e3\", \"remark\": \"\\u670d\\u52a1\\u7aef\\u7aef\\u53e3\"}, {\"name\": \"s_bytes\", \"type\": \"long\", \"visible_name\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u5927\\u5c0f\", \"remark\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u5927\\u5c0f\"}, {\"name\": \"s_body\", \"type\": \"string\", \"visible_name\": \"\\u54cd\\u5e94\\u5185\\u5bb9\", \"remark\": \"\\u54cd\\u5e94\\u5185\\u5bb9(json\\u548cform\\u8868\\u5355\\u8131\\u654f)\"}, {\"name\": \"s_type\", \"type\": \"string\", \"visible_name\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u7c7b\\u578b\", \"remark\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u7c7b\\u578b(\\u5168\\u90e8\\u5c0f\\u5199)\"}, {\"name\": \"host\", \"type\": \"string\", \"visible_name\": \"\\u4e3b\\u673a\\u5730\\u5740\", \"remark\": \"\\u4e3b\\u673a\\u5730\\u5740(\\u5168\\u90e8\\u5c0f\\u5199\\uff0c\\u53bb\\u7aef\\u53e3)\"}, {\"name\": \"uri_stem\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u8def\\u5f84\", \"remark\": \"\\u8bf7\\u6c42\\u8def\\u5f84(\\u5168\\u90e8\\u5c0f\\u5199)\"}, {\"name\": \"uri_query\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u53c2\\u6570\", \"remark\": \"\\u8bf7\\u6c42\\u53c2\\u6570(\\u5168\\u90e8\\u5c0f\\u5199,\\u8131\\u654f)\"}, {\"name\": \"referer\", \"type\": \"string\", \"visible_name\": \"\\u5f15\\u7528\\u9875\\u9762\", \"remark\": \"\\u5f15\\u7528\\u9875\\u9762(\\u5168\\u90e8\\u5c0f\\u5199\\uff0c\\u53bb\\u7aef\\u53e3)\"}, {\"name\": \"method\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u65b9\\u6cd5\", \"remark\": \"\\u8bf7\\u6c42\\u65b9\\u6cd5(\\u5168\\u90e8\\u5927\\u5199)\"}, {\"name\": \"status\", \"type\": \"long\", \"visible_name\": \"\\u54cd\\u5e94\\u72b6\\u6001\\u7801\", \"remark\": \"\\u54cd\\u5e94\\u72b6\\u6001\\u7801\"}, {\"name\": \"cookie\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8eab\\u4efd\\u5b58\\u50a8\", \"remark\": \"\\u7528\\u6237\\u8eab\\u4efd\\u5b58\\u50a8\"}, {\"name\": \"useragent\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u4ee3\\u7406\\u4fe1\\u606f\", \"remark\": \"\\u7528\\u6237\\u4ee3\\u7406\\u4fe1\\u606f(\\u6d4f\\u89c8\\u5668\\u7c7b\\u578b)\"}, {\"name\": \"xforward\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u7684xff header\", \"remark\": \"\\u7528\\u6237\\u7684xff header\\uff0c\\u5177\\u4f53header\\u540d\\u53ef\\u914d\"}, {\"name\": \"request_time\", \"type\": \"long\", \"visible_name\": \"\\u8bf7\\u6c42\\u6d88\\u8017\\u65f6\\u95f4\", \"remark\": \"\\u8bf7\\u6c42\\u6d88\\u8017\\u65f6\\u95f4(\\u6beb\\u79d2\\u7cbe\\u5ea6)\"}, {\"name\": \"request_type\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u7c7b\\u578b\", \"remark\": \"\\u8bf7\\u6c42\\u7c7b\\u578b\"}, {\"name\": \"referer_hit\", \"type\": \"string\", \"visible_name\": \"referer\\u662f\\u5426\\u547d\\u4e2d\", \"remark\": \"referer\\u662f\\u5426\\u547d\\u4e2d\"}, {\"name\": \"notices\", \"type\": \"string\", \"visible_name\": \"\\u98ce\\u9669\\u540d\\u5355\", \"remark\": \"\\u98ce\\u9669\\u540d\\u5355\"}, {\"name\": \"geo_city\", \"type\": \"string\", \"visible_name\": \"\\u5730\\u7406\\u4f4d\\u7f6e\", \"remark\": \"\\u5730\\u7406\\u4f4d\\u7f6e\"}, {\"name\": \"geo_province\", \"type\": \"string\", \"visible_name\": \"\\u5730\\u7406\\u4f4d\\u7f6e\", \"remark\": \"\\u5730\\u7406\\u4f4d\\u7f6e\"}]',1542255152019),(2,'nebula','HTTP_STATIC','静态资源请求','base','静态资源请求','[]','1.0','[{\"name\": \"c_ip\", \"type\": \"string\", \"visible_name\": \"\\u5ba2\\u6237\\u7aefip\", \"remark\": \"\\u5ba2\\u6237\\u7aefIP(\\u9ed8\\u8ba4\\u53d6xforward\\u6700\\u540e\\u4e00\\u4e2a)\"}, {\"name\": \"sid\", \"type\": \"string\", \"visible_name\": \"session\\u4f1a\\u8bddID\", \"remark\": \"session\\u4f1a\\u8bddID\"}, {\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237ID\", \"remark\": \"\\u7528\\u6237ID\"}, {\"name\": \"did\", \"type\": \"string\", \"visible_name\": \"\\u8bbe\\u5907ID\", \"remark\": \"\\u8bbe\\u5907ID\"}, {\"name\": \"platform\", \"type\": \"string\", \"visible_name\": \"\\u5ba2\\u6237\\u7aef\\u7c7b\\u578b\", \"remark\": \"\\u5ba2\\u6237\\u7aef\\u7c7b\\u578b\"}, {\"name\": \"page\", \"type\": \"string\", \"visible_name\": \"\\u4f2a\\u9759\\u6001\\u9875\\u9762\\u52a0\\u5de5\\u540e\\u5730\\u5740\", \"remark\": \"\\u4f2a\\u9759\\u6001\\u9875\\u9762\\u52a0\\u5de5\\u540e\\u5730\\u5740(\\u5168\\u90e8\\u5c0f\\u5199\\uff0c\\u53bb\\u7aef\\u53e3)\"}, {\"name\": \"c_port\", \"type\": \"long\", \"visible_name\": \"\\u5ba2\\u6237\\u7aef\\u7aef\\u53e3\", \"remark\": \"\\u5ba2\\u6237\\u7aef\\u7aef\\u53e3\"}, {\"name\": \"c_bytes\", \"type\": \"long\", \"visible_name\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u5927\\u5c0f\", \"remark\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u5927\\u5c0f\"}, {\"name\": \"c_body\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\", \"remark\": \"\\u8bf7\\u6c42\\u5185\\u5bb9(json\\u548cform\\u8868\\u5355\\u8131\\u654f)\"}, {\"name\": \"c_type\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u7c7b\\u578b\", \"remark\": \"\\u8bf7\\u6c42\\u5185\\u5bb9\\u7c7b\\u578b\"}, {\"name\": \"s_ip\", \"type\": \"string\", \"visible_name\": \"\\u670d\\u52a1\\u7aefIP\", \"remark\": \"\\u670d\\u52a1\\u7aefIP\"}, {\"name\": \"s_port\", \"type\": \"long\", \"visible_name\": \"\\u670d\\u52a1\\u7aef\\u7aef\\u53e3\", \"remark\": \"\\u670d\\u52a1\\u7aef\\u7aef\\u53e3\"}, {\"name\": \"s_bytes\", \"type\": \"long\", \"visible_name\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u5927\\u5c0f\", \"remark\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u5927\\u5c0f\"}, {\"name\": \"s_body\", \"type\": \"string\", \"visible_name\": \"\\u54cd\\u5e94\\u5185\\u5bb9\", \"remark\": \"\\u54cd\\u5e94\\u5185\\u5bb9(json\\u548cform\\u8868\\u5355\\u8131\\u654f)\"}, {\"name\": \"s_type\", \"type\": \"string\", \"visible_name\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u7c7b\\u578b\", \"remark\": \"\\u54cd\\u5e94\\u5185\\u5bb9\\u7c7b\\u578b(\\u5168\\u90e8\\u5c0f\\u5199)\"}, {\"name\": \"host\", \"type\": \"string\", \"visible_name\": \"\\u4e3b\\u673a\\u5730\\u5740\", \"remark\": \"\\u4e3b\\u673a\\u5730\\u5740(\\u5168\\u90e8\\u5c0f\\u5199\\uff0c\\u53bb\\u7aef\\u53e3)\"}, {\"name\": \"uri_stem\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u8def\\u5f84\", \"remark\": \"\\u8bf7\\u6c42\\u8def\\u5f84(\\u5168\\u90e8\\u5c0f\\u5199)\"}, {\"name\": \"uri_query\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u53c2\\u6570\", \"remark\": \"\\u8bf7\\u6c42\\u53c2\\u6570(\\u5168\\u90e8\\u5c0f\\u5199,\\u8131\\u654f)\"}, {\"name\": \"referer\", \"type\": \"string\", \"visible_name\": \"\\u5f15\\u7528\\u9875\\u9762\", \"remark\": \"\\u5f15\\u7528\\u9875\\u9762(\\u5168\\u90e8\\u5c0f\\u5199\\uff0c\\u53bb\\u7aef\\u53e3)\"}, {\"name\": \"method\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u65b9\\u6cd5\", \"remark\": \"\\u8bf7\\u6c42\\u65b9\\u6cd5(\\u5168\\u90e8\\u5927\\u5199)\"}, {\"name\": \"status\", \"type\": \"long\", \"visible_name\": \"\\u54cd\\u5e94\\u72b6\\u6001\\u7801\", \"remark\": \"\\u54cd\\u5e94\\u72b6\\u6001\\u7801\"}, {\"name\": \"cookie\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8eab\\u4efd\\u5b58\\u50a8\", \"remark\": \"\\u7528\\u6237\\u8eab\\u4efd\\u5b58\\u50a8\"}, {\"name\": \"useragent\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u4ee3\\u7406\\u4fe1\\u606f\", \"remark\": \"\\u7528\\u6237\\u4ee3\\u7406\\u4fe1\\u606f(\\u6d4f\\u89c8\\u5668\\u7c7b\\u578b)\"}, {\"name\": \"xforward\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u7684xff header\", \"remark\": \"\\u7528\\u6237\\u7684xff header\\uff0c\\u5177\\u4f53header\\u540d\\u53ef\\u914d\"}, {\"name\": \"request_time\", \"type\": \"long\", \"visible_name\": \"\\u8bf7\\u6c42\\u6d88\\u8017\\u65f6\\u95f4\", \"remark\": \"\\u8bf7\\u6c42\\u6d88\\u8017\\u65f6\\u95f4(\\u6beb\\u79d2\\u7cbe\\u5ea6)\"}, {\"name\": \"request_type\", \"type\": \"string\", \"visible_name\": \"\\u8bf7\\u6c42\\u7c7b\\u578b\", \"remark\": \"\\u8bf7\\u6c42\\u7c7b\\u578b\"}, {\"name\": \"referer_hit\", \"type\": \"string\", \"visible_name\": \"referer\\u662f\\u5426\\u547d\\u4e2d\", \"remark\": \"referer\\u662f\\u5426\\u547d\\u4e2d\"}, {\"name\": \"notices\", \"type\": \"string\", \"visible_name\": \"\\u98ce\\u9669\\u540d\\u5355\", \"remark\": \"\\u98ce\\u9669\\u540d\\u5355\"}, {\"name\": \"geo_city\", \"type\": \"string\", \"visible_name\": \"\\u5730\\u7406\\u4f4d\\u7f6e\", \"remark\": \"\\u5730\\u7406\\u4f4d\\u7f6e\"}, {\"name\": \"geo_province\", \"type\": \"string\", \"visible_name\": \"\\u5730\\u7406\\u4f4d\\u7f6e\", \"remark\": \"\\u5730\\u7406\\u4f4d\\u7f6e\"}]',1542255152031),(3,'nebula','ACCOUNT_CERTIFICATION','账号-实名验证','base','账号-实名验证','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u5b9e\\u540d\\u9a8c\\u8bc1\\u8d26\\u53f7\", \"remark\": \"\\u5b9e\\u540d\\u9a8c\\u8bc1\\u8d26\\u53f7\"}, {\"name\": \"person_id\", \"type\": \"string\", \"visible_name\": \"\\u5b9e\\u540d\\u8eab\\u4efd\\u8bc1ID\", \"remark\": \"\\u5b9e\\u540d\\u8eab\\u4efd\\u8bc1ID\"}, {\"name\": \"user_name\", \"type\": \"string\", \"visible_name\": \"\\u771f\\u5b9e\\u59d3\\u540d\", \"remark\": \"\\u771f\\u5b9e\\u59d3\\u540d\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u5b9e\\u540d\\u9a8c\\u8bc1\\u7ed3\\u679c\", \"remark\": \"\\u5b9e\\u540d\\u9a8c\\u8bc1\\u7ed3\\u679c\"}]',1542255152041),(4,'nebula','ACCOUNT_LOGIN','账号-登录','base','账号-登录','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u767b\\u9646\\u7528\\u6237\\u540d\", \"remark\": \"\\u767b\\u9646\\u7528\\u6237\\u540d\"}, {\"name\": \"login_verification_type\", \"type\": \"string\", \"visible_name\": \"\\u767b\\u9646\\u9a8c\\u8bc1\\u7c7b\\u578b\", \"remark\": \"\\u767b\\u9646\\u9a8c\\u8bc1\\u7c7b\\u578b\"}, {\"name\": \"password\", \"type\": \"string\", \"visible_name\": \"\\u767b\\u9646\\u9a8c\\u8bc1\\u5bc6\\u7801\", \"remark\": \"\\u767b\\u9646\\u9a8c\\u8bc1\\u5bc6\\u7801(\\u8131\\u654f)\"}, {\"name\": \"captcha\", \"type\": \"string\", \"visible_name\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\", \"remark\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u767b\\u9646\\u7ed3\\u679c\", \"remark\": \"\\u767b\\u9646\\u7ed3\\u679c\"}, {\"name\": \"remember_me\", \"type\": \"string\", \"visible_name\": \"\\u4e0b\\u6b21\\u81ea\\u52a8\\u767b\\u9646\", \"remark\": \"\\u4e0b\\u6b21\\u81ea\\u52a8\\u767b\\u9646\"}, {\"name\": \"login_channel\", \"type\": \"string\", \"visible_name\": \"\\u767b\\u9646\\u6e20\\u9053\", \"remark\": \"\\u767b\\u9646\\u6e20\\u9053\"}]',1542255152053),(5,'nebula','ACCOUNT_PW_CHANGE','账号-密码修改','base','账号-密码修改','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u4fee\\u6539\\u5bc6\\u7801\\u8d26\\u53f7\", \"remark\": \"\\u4fee\\u6539\\u5bc6\\u7801\\u8d26\\u53f7\"}, {\"name\": \"old_password\", \"type\": \"string\", \"visible_name\": \"\\u539f\\u5bc6\\u7801\", \"remark\": \"\\u539f\\u5bc6\\u7801(\\u8131\\u654f)\"}, {\"name\": \"new_password\", \"type\": \"string\", \"visible_name\": \"\\u4fee\\u6539\\u540e\\u5bc6\\u7801\", \"remark\": \"\\u4fee\\u6539\\u540e\\u5bc6\\u7801(\\u8131\\u654f)\"}, {\"name\": \"verification_token\", \"type\": \"string\", \"visible_name\": \"\\u9a8c\\u8bc1\\u51ed\\u8bc1\", \"remark\": \"\\u9a8c\\u8bc1\\u51ed\\u8bc1\"}, {\"name\": \"verification_token_type\", \"type\": \"string\", \"visible_name\": \"\\u9a8c\\u8bc1\\u51ed\\u8bc1\\u7c7b\\u578b\", \"remark\": \"\\u9a8c\\u8bc1\\u51ed\\u8bc1\\u7c7b\\u578b\"}, {\"name\": \"captcha\", \"type\": \"string\", \"visible_name\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\", \"remark\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u4fee\\u6539\\u7ed3\\u679c\", \"remark\": \"\\u4fee\\u6539\\u7ed3\\u679c\"}]',1542255152067),(6,'nebula','ACCOUNT_REFERRALCODE_CREATE','账号-生成推荐码','base','账号-生成推荐码','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u540d\", \"remark\": \"\\u7528\\u6237\\u540d\"}, {\"name\": \"referralcode\", \"type\": \"string\", \"visible_name\": \"\\u751f\\u6210ID\", \"remark\": \"\\u751f\\u6210ID\"}, {\"name\": \"code_type\", \"type\": \"string\", \"visible_name\": \"\\u751f\\u6210ID\\u7684\\u7c7b\\u578b\", \"remark\": \"\\u751f\\u6210ID\\u7684\\u7c7b\\u578b\"}]',1542255152079),(7,'nebula','ACCOUNT_REGISTRATION','账号-注册','base','账号-注册','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u540d\", \"remark\": \"\\u6ce8\\u518c\\u540d\"}, {\"name\": \"password\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u5bc6\\u7801\", \"remark\": \"\\u6ce8\\u518c\\u5bc6\\u7801(\\u8131\\u654f)\"}, {\"name\": \"register_verification_token\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u9a8c\\u8bc1\\u51ed\\u8bc1\", \"remark\": \"\\u6ce8\\u518c\\u9a8c\\u8bc1\\u51ed\\u8bc1\"}, {\"name\": \"register_verification_token_type\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u9a8c\\u8bc1\\u51ed\\u8bc1\\u7c7b\\u578b\", \"remark\": \"\\u6ce8\\u518c\\u9a8c\\u8bc1\\u51ed\\u8bc1\\u7c7b\\u578b\"}, {\"name\": \"captcha\", \"type\": \"string\", \"visible_name\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\", \"remark\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u7ed3\\u679c\", \"remark\": \"\\u6ce8\\u518c\\u7ed3\\u679c\"}, {\"name\": \"user_name\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u771f\\u5b9e\\u59d3\\u540d\", \"remark\": \"\\u6ce8\\u518c\\u771f\\u5b9e\\u59d3\\u540d\"}, {\"name\": \"register_channel\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u6e20\\u9053\", \"remark\": \"\\u6ce8\\u518c\\u6e20\\u9053\"}, {\"name\": \"invite_code\", \"type\": \"string\", \"visible_name\": \"\\u6ce8\\u518c\\u9080\\u8bf7\\u7801\", \"remark\": \"\\u6ce8\\u518c\\u9080\\u8bf7\\u7801\"}]',1542255152115),(8,'nebula','ACCOUNT_TOKEN_CHANGE','账号-安全凭证修改','base','账号-安全凭证修改','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u4fee\\u6539\\u51ed\\u8bc1\\u8d26\\u53f7\", \"remark\": \"\\u4fee\\u6539\\u51ed\\u8bc1\\u8d26\\u53f7\"}, {\"name\": \"old_token\", \"type\": \"string\", \"visible_name\": \"\\u539f\\u51ed\\u8bc1\", \"remark\": \"\\u539f\\u51ed\\u8bc1\"}, {\"name\": \"new_token\", \"type\": \"string\", \"visible_name\": \"\\u65b0\\u51ed\\u8bc1\", \"remark\": \"\\u65b0\\u51ed\\u8bc1\"}, {\"name\": \"token_type\", \"type\": \"string\", \"visible_name\": \"\\u51ed\\u8bc1\\u7c7b\\u578b\", \"remark\": \"\\u51ed\\u8bc1\\u7c7b\\u578b\"}, {\"name\": \"captcha\", \"type\": \"string\", \"visible_name\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\", \"remark\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u4fee\\u6539\\u7ed3\\u679c\", \"remark\": \"\\u4fee\\u6539\\u7ed3\\u679c\"}]',1542255152137),(9,'nebula','ACTIVITY_DO','营销-参加活动','base','营销-参加活动','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8d26\\u53f7\", \"remark\": \"\\u7528\\u6237\\u8d26\\u53f7\"}, {\"name\": \"activity_name\", \"type\": \"string\", \"visible_name\": \"\\u6d3b\\u52a8\\u540d\", \"remark\": \"\\u6d3b\\u52a8\\u540d\"}, {\"name\": \"activity_type\", \"type\": \"string\", \"visible_name\": \"\\u6d3b\\u52a8\\u7c7b\\u578b\", \"remark\": \"\\u6d3b\\u52a8\\u7c7b\\u578b\"}, {\"name\": \"activity_gain_count\", \"type\": \"long\", \"visible_name\": \"\\u6d3b\\u52a8\\u6240\\u5f97\", \"remark\": \"\\u6d3b\\u52a8\\u6240\\u5f97\"}, {\"name\": \"activity_gain_amount\", \"type\": \"long\", \"visible_name\": \"\\u6d3b\\u52a8\\u6240\\u5f97\", \"remark\": \"\\u6d3b\\u52a8\\u6240\\u5f97\"}, {\"name\": \"activity_pay_amount\", \"type\": \"long\", \"visible_name\": \"\\u6d3b\\u52a8\\u652f\\u51fa\", \"remark\": \"\\u6d3b\\u52a8\\u652f\\u51fa\"}, {\"name\": \"user_name\", \"type\": \"string\", \"visible_name\": \"\\u6d3b\\u52a8\\u76f8\\u5173\\u4eba\\u5458\", \"remark\": \"\\u6d3b\\u52a8\\u76f8\\u5173\\u4eba\\u5458\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u53c2\\u4e0e\\u7ed3\\u679c\", \"remark\": \"\\u53c2\\u4e0e\\u7ed3\\u679c\"}]',1542255152194),(10,'nebula','HTTP_DYNAMIC_DELAY','http动态资源访问','base','http动态资源访问','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"delay_strategy\", \"type\": \"string\", \"visible_name\": \"\\u5ef6\\u8fdf\\u7b56\\u7565\", \"remark\": \"\\u5ef6\\u8fdf\\u7b56\\u7565\"}]',1542255152231),(11,'nebula','ORDER_CANCEL','订单-取消','base','订单-取消','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"order_id\", \"type\": \"string\", \"visible_name\": \"\\u8ba2\\u5355ID\", \"remark\": \"\\u8ba2\\u5355ID\"}, {\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u53d6\\u6d88\\u8ba2\\u5355\\u8d26\\u53f7\", \"remark\": \"\\u53d6\\u6d88\\u8ba2\\u5355\\u8d26\\u53f7\"}, {\"name\": \"merchant\", \"type\": \"string\", \"visible_name\": \"\\u8ba2\\u5355\\u5bf9\\u5e94\\u5546\\u6237\", \"remark\": \"\\u8ba2\\u5355\\u5bf9\\u5e94\\u5546\\u6237\"}, {\"name\": \"cancel_reason\", \"type\": \"string\", \"visible_name\": \"\\u53d6\\u6d88\\u539f\\u56e0\", \"remark\": \"\\u53d6\\u6d88\\u539f\\u56e0\"}, {\"name\": \"transaction_id\", \"type\": \"string\", \"visible_name\": \"\\u8ba2\\u5355\\u5bf9\\u5e94\\u4ea4\\u6613\\u6d41\\u6c34ID\", \"remark\": \"\\u8ba2\\u5355\\u5bf9\\u5e94\\u4ea4\\u6613\\u6d41\\u6c34ID\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u4e0b\\u5355\\u7ed3\\u679c\", \"remark\": \"\\u4e0b\\u5355\\u7ed3\\u679c\"}]',1542255152252),(12,'nebula','ORDER_SUBMIT','订单-提交','base','订单-提交','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"order_id\", \"type\": \"string\", \"visible_name\": \"\\u8ba2\\u5355ID\", \"remark\": \"\\u8ba2\\u5355ID\"}, {\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u4e0b\\u5355\\u8d26\\u53f7\", \"remark\": \"\\u4e0b\\u5355\\u8d26\\u53f7\"}, {\"name\": \"merchant_type\", \"type\": \"string\", \"visible_name\": \"\\u4e1a\\u52a1\\u7c7b\\u578b\", \"remark\": \"\\u4e1a\\u52a1\\u7c7b\\u578b\"}, {\"name\": \"merchant\", \"type\": \"string\", \"visible_name\": \"\\u5546\\u6237\\u53f7\", \"remark\": \"\\u5546\\u6237\\u53f7\"}, {\"name\": \"merchant_name\", \"type\": \"string\", \"visible_name\": \"\\u5546\\u6237\\u540d\\u79f0\", \"remark\": \"\\u5546\\u6237\\u540d\\u79f0\"}, {\"name\": \"product_id\", \"type\": \"string\", \"visible_name\": \"\\u654f\\u611f\\u6216\\u4e3b\\u8981\\u8d2d\\u4e70\\u4ea7\\u54c1ID\", \"remark\": \"\\u654f\\u611f\\u6216\\u4e3b\\u8981\\u8d2d\\u4e70\\u4ea7\\u54c1ID\"}, {\"name\": \"product_types\", \"type\": \"string\", \"visible_name\": \"\\u5546\\u54c1\\u54c1\\u7c7b\", \"remark\": \"\\u5546\\u54c1\\u54c1\\u7c7b\"}, {\"name\": \"product_count\", \"type\": \"long\", \"visible_name\": \"\\u5546\\u54c1\\u4e2a\\u6570\", \"remark\": \"\\u5546\\u54c1\\u4e2a\\u6570\"}, {\"name\": \"product_total_count\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u5546\\u54c1\\u603b\\u4e2a\\u6570\", \"remark\": \"\\u8ba2\\u5355\\u5546\\u54c1\\u603b\\u4e2a\\u6570\"}, {\"name\": \"order_original_amount\", \"type\": \"long\", \"visible_name\": \"\\u672a\\u4f7f\\u7528\\u4f18\\u60e0\\u5238\\u524d\\u7684\\u8ba2\\u5355\\u539f\\u4ef7\", \"remark\": \"\\u672a\\u4f7f\\u7528\\u4f18\\u60e0\\u5238\\u524d\\u7684\\u8ba2\\u5355\\u539f\\u4ef7\"}, {\"name\": \"order_money_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u73b0\\u91d1\\u91d1\\u989d\", \"remark\": \"\\u8ba2\\u5355\\u73b0\\u91d1\\u91d1\\u989d\"}, {\"name\": \"order_coupon_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u4f18\\u60e0\\u5238\\u91d1\\u989d\", \"remark\": \"\\u8ba2\\u5355\\u4f18\\u60e0\\u5238\\u91d1\\u989d\"}, {\"name\": \"order_point_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u79ef\\u5206\\u6570\", \"remark\": \"\\u8ba2\\u5355\\u79ef\\u5206\\u6570\"}, {\"name\": \"order_use_balance_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u4f7f\\u7528\\u50a8\\u503c\\u4f59\\u989d\\u6570\", \"remark\": \"\\u8ba2\\u5355\\u4f7f\\u7528\\u50a8\\u503c\\u4f59\\u989d\\u6570\"}, {\"name\": \"transaction_id\", \"type\": \"string\", \"visible_name\": \"\\u8ba2\\u5355\\u5bf9\\u5e94\\u4ea4\\u6613\\u6d41\\u6c34ID\", \"remark\": \"\\u8ba2\\u5355\\u5bf9\\u5e94\\u4ea4\\u6613\\u6d41\\u6c34ID\"}, {\"name\": \"receiver_mobile\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u624b\\u673a\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u624b\\u673a\"}, {\"name\": \"receiver_address_country\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u56fd\\u5bb6\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u56fd\\u5bb6\"}, {\"name\": \"receiver_address_province\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u7701\\u4efd\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u7701\\u4efd\"}, {\"name\": \"receiver_address_city\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u57ce\\u5e02\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u57ce\\u5e02\"}, {\"name\": \"receiver_address_detail\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u5177\\u4f53\\u5730\\u5740\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u6536\\u8d27\\u5730\\u5177\\u4f53\\u5730\\u5740\"}, {\"name\": \"user_name\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u59d3\\u540d\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u59d3\\u540d\"}, {\"name\": \"receiver_email\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u90ae\\u7bb1\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u90ae\\u7bb1\"}, {\"name\": \"receiver_email_domain\", \"type\": \"string\", \"visible_name\": \"\\u6536\\u8d27\\u4eba\\u90ae\\u7bb1\\u540e\\u7f00\", \"remark\": \"\\u6536\\u8d27\\u4eba\\u90ae\\u7bb1\\u540e\\u7f00\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u4e0b\\u5355\\u7ed3\\u679c\", \"remark\": \"\\u4e0b\\u5355\\u7ed3\\u679c\"}, {\"name\": \"start_time\", \"type\": \"string\", \"visible_name\": \"\\u5165\\u4f4f\\u65e5\\u671f\", \"remark\": \"\\u5165\\u4f4f\\u65e5\\u671f\"}, {\"name\": \"end_time\", \"type\": \"string\", \"visible_name\": \"\\u9000\\u623f\\u65e5\\u671f\", \"remark\": \"\\u9000\\u623f\\u65e5\\u671f\"}, {\"name\": \"departure_city\", \"type\": \"string\", \"visible_name\": \"\\u51fa\\u53d1\\u57ce\\u5e02\", \"remark\": \"\\u51fa\\u53d1\\u57ce\\u5e02\"}, {\"name\": \"arrival_city\", \"type\": \"string\", \"visible_name\": \"\\u5230\\u8fbe\\u57ce\\u5e02\", \"remark\": \"\\u5230\\u8fbe\\u57ce\\u5e02\"}, {\"name\": \"product_location\", \"type\": \"string\", \"visible_name\": \"\\u5546\\u54c1\\u6240\\u5728\\u57ce\\u5e02\", \"remark\": \"\\u5546\\u54c1\\u6240\\u5728\\u57ce\\u5e02\"}, {\"name\": \"uid_level\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u7b49\\u7ea7\", \"remark\": \"\\u7528\\u6237\\u7b49\\u7ea7\"}]',1542255152290),(13,'nebula','TRANSACTION_BANKCRD_BIND','支付-绑卡','base','支付-绑卡','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8d26\\u53f7\", \"remark\": \"\\u7528\\u6237\\u8d26\\u53f7\"}, {\"name\": \"card_number\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u5361\\u53f7\", \"remark\": \"\\u94f6\\u884c\\u5361\\u53f7\"}, {\"name\": \"card_type\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u5361\\u7c7b\\u578b\", \"remark\": \"\\u94f6\\u884c\\u5361\\u7c7b\\u578b\"}, {\"name\": \"bank_type\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u7c7b\\u578b\", \"remark\": \"\\u94f6\\u884c\\u7c7b\\u578b\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u7ed1\\u5b9a\\u7ed3\\u679c\", \"remark\": \"\\u7ed1\\u5b9a\\u7ed3\\u679c\"}, {\"name\": \"card_realname\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u5361\\u59d3\\u540d\", \"remark\": \"\\u94f6\\u884c\\u5361\\u59d3\\u540d\"}, {\"name\": \"card_mobile\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u5361\\u9a8c\\u8bc1\\u624b\\u673a\", \"remark\": \"\\u94f6\\u884c\\u5361\\u9a8c\\u8bc1\\u624b\\u673a\"}, {\"name\": \"captcha\", \"type\": \"string\", \"visible_name\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\", \"remark\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\"}]',1542255152315),(14,'nebula','TRANSACTION_BANKCRD_UNBIND','支付-解绑','base','支付-解绑','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8d26\\u53f7\", \"remark\": \"\\u7528\\u6237\\u8d26\\u53f7\"}, {\"name\": \"card_number\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u5361\\u53f7\", \"remark\": \"\\u94f6\\u884c\\u5361\\u53f7\"}, {\"name\": \"card_type\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u5361\\u7c7b\\u578b\", \"remark\": \"\\u94f6\\u884c\\u5361\\u7c7b\\u578b\"}, {\"name\": \"bank_type\", \"type\": \"string\", \"visible_name\": \"\\u94f6\\u884c\\u7c7b\\u578b\", \"remark\": \"\\u94f6\\u884c\\u7c7b\\u578b\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u89e3\\u7ed1\\u7ed3\\u679c\", \"remark\": \"\\u89e3\\u7ed1\\u7ed3\\u679c\"}, {\"name\": \"captcha\", \"type\": \"string\", \"visible_name\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\", \"remark\": \"\\u56fe\\u7247\\u9a8c\\u8bc1\\u7801\"}]',1542255152376),(15,'nebula','TRANSACTION_DEPOSIT','支付-充值','base','支付-充值','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8d26\\u6237\", \"remark\": \"\\u7528\\u6237\\u8d26\\u6237\"}, {\"name\": \"transaction_id\", \"type\": \"string\", \"visible_name\": \"\\u5145\\u503c\\u6d41\\u6c34\\u53f7\", \"remark\": \"\\u5145\\u503c\\u6d41\\u6c34\\u53f7\"}, {\"name\": \"deposit_amount\", \"type\": \"long\", \"visible_name\": \"\\u5145\\u503c\\u91d1\\u989d\", \"remark\": \"\\u5145\\u503c\\u91d1\\u989d\"}, {\"name\": \"card_number\", \"type\": \"string\", \"visible_name\": \"\\u5145\\u503c\\u5361\\u53f7\", \"remark\": \"\\u5145\\u503c\\u5361\\u53f7\"}, {\"name\": \"user_name\", \"type\": \"string\", \"visible_name\": \"\\u4ea4\\u6613\\u76f8\\u5173\\u7528\\u6237\", \"remark\": \"\\u4ea4\\u6613\\u76f8\\u5173\\u7528\\u6237(\\u6388\\u4e88\\u4eba)\"}, {\"name\": \"account_balance_before\", \"type\": \"double\", \"visible_name\": \"\\u5145\\u503c\\u524d\\u8d26\\u6237\\u4f59\\u989d\", \"remark\": \"\\u5145\\u503c\\u524d\\u8d26\\u6237\\u4f59\\u989d\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u5145\\u503c\\u7ed3\\u679c\", \"remark\": \"\\u5145\\u503c\\u7ed3\\u679c\"}]',1542255152413),(16,'nebula','TRANSACTION_ESCROW','支付-第三方支付','base','支付-第三方支付','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8d26\\u6237\", \"remark\": \"\\u7528\\u6237\\u8d26\\u6237\"}, {\"name\": \"transaction_id\", \"type\": \"string\", \"visible_name\": \"\\u7b2c\\u4e09\\u65b9\\u652f\\u4ed8\\u6d41\\u6c34\\u53f7\", \"remark\": \"\\u7b2c\\u4e09\\u65b9\\u652f\\u4ed8\\u6d41\\u6c34\\u53f7\"}, {\"name\": \"order_id\", \"type\": \"string\", \"visible_name\": \"\\u8ba2\\u5355id\", \"remark\": \"\\u8ba2\\u5355id\"}, {\"name\": \"merchant\", \"type\": \"string\", \"visible_name\": \"\\u5546\\u6237\\u53f7\", \"remark\": \"\\u5546\\u6237\\u53f7\"}, {\"name\": \"merchant_name\", \"type\": \"string\", \"visible_name\": \"\\u5546\\u6237\\u540d\\u79f0\", \"remark\": \"\\u5546\\u6237\\u540d\\u79f0\"}, {\"name\": \"order_original_amount\", \"type\": \"long\", \"visible_name\": \"\\u672a\\u4f7f\\u7528\\u4f18\\u60e0\\u5238\\u524d\\u7684\\u8ba2\\u5355\\u539f\\u4ef7\", \"remark\": \"\\u672a\\u4f7f\\u7528\\u4f18\\u60e0\\u5238\\u524d\\u7684\\u8ba2\\u5355\\u539f\\u4ef7\"}, {\"name\": \"order_money_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u73b0\\u91d1\\u91d1\\u989d\", \"remark\": \"\\u8ba2\\u5355\\u73b0\\u91d1\\u91d1\\u989d\"}, {\"name\": \"order_coupon_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u4f18\\u60e0\\u5238\\u91d1\\u989d\", \"remark\": \"\\u8ba2\\u5355\\u4f18\\u60e0\\u5238\\u91d1\\u989d\"}, {\"name\": \"order_point_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u79ef\\u5206\\u6570\", \"remark\": \"\\u8ba2\\u5355\\u79ef\\u5206\\u6570\"}, {\"name\": \"order_use_balance_amount\", \"type\": \"long\", \"visible_name\": \"\\u8ba2\\u5355\\u4f7f\\u7528\\u50a8\\u503c\\u4f59\\u989d\\u6570\", \"remark\": \"\\u8ba2\\u5355\\u4f7f\\u7528\\u50a8\\u503c\\u4f59\\u989d\\u6570\"}, {\"name\": \"escrow_type\", \"type\": \"string\", \"visible_name\": \"\\u7b2c\\u4e09\\u65b9\\u652f\\u4ed8\\u5e73\\u53f0\\u7c7b\\u578b\", \"remark\": \"\\u7b2c\\u4e09\\u65b9\\u652f\\u4ed8\\u5e73\\u53f0\\u7c7b\\u578b\"}, {\"name\": \"escrow_account\", \"type\": \"string\", \"visible_name\": \"\\u7b2c\\u4e09\\u65b9\\u652f\\u4ed8\\u8d26\\u53f7\", \"remark\": \"\\u7b2c\\u4e09\\u65b9\\u652f\\u4ed8\\u8d26\\u53f7\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u652f\\u4ed8\\u7ed3\\u679c\", \"remark\": \"\\u652f\\u4ed8\\u7ed3\\u679c\"}, {\"name\": \"uid_level\", \"type\": \"long\", \"visible_name\": \"\\u7528\\u6237\\u7b49\\u7ea7\", \"remark\": \"\\u7528\\u6237\\u7b49\\u7ea7\"}]',1542255152432),(17,'nebula','TRANSACTION_WITHDRAW','支付-取现','base','支付-取现','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','1.0','[{\"name\": \"uid\", \"type\": \"string\", \"visible_name\": \"\\u7528\\u6237\\u8d26\\u6237\", \"remark\": \"\\u7528\\u6237\\u8d26\\u6237\"}, {\"name\": \"transaction_id\", \"type\": \"string\", \"visible_name\": \"\\u53d6\\u73b0\\u6216\\u6d88\\u8d39\\u6d41\\u6c34\\u53f7\", \"remark\": \"\\u53d6\\u73b0\\u6216\\u6d88\\u8d39\\u6d41\\u6c34\\u53f7\"}, {\"name\": \"withdraw_amount\", \"type\": \"long\", \"visible_name\": \"\\u53d6\\u51fa\\u6216\\u6d88\\u8d39\\u91d1\\u989d\", \"remark\": \"\\u53d6\\u51fa\\u6216\\u6d88\\u8d39\\u91d1\\u989d\"}, {\"name\": \"withdraw_type\", \"type\": \"string\", \"visible_name\": \"\\u53d6\\u51fa\\u7c7b\\u578b\\uff0c\\u6d88\\u8d39\\uff0f\\u63d0\\u73b0\", \"remark\": \"\\u53d6\\u51fa\\u7c7b\\u578b\\uff0c\\u6d88\\u8d39\\uff0f\\u63d0\\u73b0\"}, {\"name\": \"card_number\", \"type\": \"string\", \"visible_name\": \"\\u88ab\\u5145\\u503c\\u5361\\u53f7\", \"remark\": \"\\u88ab\\u5145\\u503c\\u5361\\u53f7\"}, {\"name\": \"user_name\", \"type\": \"string\", \"visible_name\": \"\\u4ea4\\u6613\\u76f8\\u5173\\u7528\\u6237\", \"remark\": \"\\u4ea4\\u6613\\u76f8\\u5173\\u7528\\u6237\"}, {\"name\": \"account_balance_before\", \"type\": \"long\", \"visible_name\": \"\\u8d26\\u6237\\u53d6\\u73b0\\uff0f\\u6d88\\u8d39\\u524d\\u4f59\\u989d\", \"remark\": \"\\u8d26\\u6237\\u53d6\\u73b0\\uff0f\\u6d88\\u8d39\\u524d\\u4f59\\u989d\"}, {\"name\": \"result\", \"type\": \"string\", \"visible_name\": \"\\u53d6\\u73b0\\u7ed3\\u679c\", \"remark\": \"\\u53d6\\u73b0\\u7ed3\\u679c\"}]',1542255152483);
/*!40000 ALTER TABLE `eventmodel_default` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `strategy_default`
--

DROP TABLE IF EXISTS `strategy_default`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `strategy_default` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `category` char(100) DEFAULT NULL,
  `score` int(11) DEFAULT NULL,
  `isLock` int(11) DEFAULT NULL,
  `tags` char(200) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `version` char(100) DEFAULT NULL,
  `status` char(100) DEFAULT NULL,
  `createtime` bigint(20) DEFAULT NULL,
  `modifytime` bigint(20) DEFAULT NULL,
  `starteffect` bigint(20) DEFAULT NULL,
  `endeffect` bigint(20) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `config` blob DEFAULT NULL,
  `group_id` int(11) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `strategy_default`
--

LOCK TABLES `strategy_default` WRITE;
/*!40000 ALTER TABLE `strategy_default` DISABLE KEYS */;
/*!40000 ALTER TABLE `strategy_default` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `variablemeta_default`
--

DROP TABLE IF EXISTS `variablemeta_default`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `variablemeta_default` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `chinese_name` char(100) DEFAULT NULL,
  `module` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `dimension` char(100) DEFAULT NULL,
  `value_type` char(100) DEFAULT NULL,
  `src_variablesid` varchar(1000) DEFAULT NULL,
  `src_eventid` char(100) DEFAULT NULL,
  `priority` int(11) DEFAULT NULL,
  `properties` blob DEFAULT NULL,
  `expire` bigint(20) DEFAULT NULL,
  `ttl` int(11) DEFAULT NULL,
  `internal` int(11) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  `fulldata` blob DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `variablemeta_default`
--

LOCK TABLES `variablemeta_default` WRITE;
/*!40000 ALTER TABLE `variablemeta_default` DISABLE KEYS */;
/*!40000 ALTER TABLE `variablemeta_default` ENABLE KEYS */;
UNLOCK TABLES;

--
-- Table structure for table `variablemodel_default`
--

DROP TABLE IF EXISTS `variablemodel_default`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `variablemodel_default` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `module` char(100) DEFAULT NULL,
  `app` char(100) DEFAULT NULL,
  `name` char(100) DEFAULT NULL,
  `remark` varchar(1000) DEFAULT NULL,
  `visible_name` char(100) DEFAULT NULL,
  `dimension` char(100) DEFAULT NULL,
  `status` char(100) DEFAULT NULL,
  `type` char(100) DEFAULT NULL,
  `value_type` char(100) DEFAULT NULL,
  `value_subtype` char(100) DEFAULT NULL,
  `value_category` char(100) DEFAULT NULL,
  `source` varchar(1000) DEFAULT NULL,
  `filter` varchar(4000) DEFAULT NULL,
  `period` varchar(100) DEFAULT NULL,
  `function` varchar(1000) DEFAULT NULL,
  `groupbykeys` varchar(1000) DEFAULT NULL,
  `hint` varchar(1000) DEFAULT NULL,
  `last_modified` bigint(20) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=254 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `variablemodel_default`
--

LOCK TABLES `variablemodel_default` WRITE;
/*!40000 ALTER TABLE `variablemodel_default` DISABLE KEYS */;
INSERT INTO `variablemodel_default` VALUES (1,'base','nebula','ACCOUNT_CERTIFICATION','账号-实名验证','账号-实名验证','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_CERTIFICATION\"}]','{}','{}','{}','[]','{}',1542255153597),(2,'base','nebula','ACCOUNT_LOGIN','账号-登录','账号-登录','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{}','{}','[]','{}',1542255153643),(3,'base','nebula','ACCOUNT_PW_CHANGE','账号-密码修改','账号-密码修改','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_PW_CHANGE\"}]','{}','{}','{}','[]','{}',1542255153658),(4,'base','nebula','ACCOUNT_REFERRALCODE_CREATE','账号-生成推荐码','账号-生成推荐码','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REFERRALCODE_CREATE\"}]','{}','{}','{}','[]','{}',1542255153676),(5,'base','nebula','ACCOUNT_REGISTRATION','账号-注册','账号-注册','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{}','{}','{}','[]','{}',1542255153694),(6,'base','nebula','ACCOUNT_TOKEN_CHANGE','账号-安全凭证修改','账号-安全凭证修改','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{}','{}','{}','[]','{}',1542255153708),(7,'base','nebula','ACTIVITY_DO','营销-参加活动','营销-参加活动','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ACTIVITY_DO\"}]','{}','{}','{}','[]','{}',1542255153726),(8,'base','nebula','HTTP_DYNAMIC','动态资源请求','动态资源请求','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{}','{}','[]','{}',1542255153742),(9,'base','nebula','HTTP_DYNAMIC_DELAY','http动态资源访问','http动态资源访问','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC_DELAY\"}]','{}','{}','{}','[]','{}',1542255153757),(10,'base','nebula','HTTP_STATIC','静态资源请求','静态资源请求','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"HTTP_STATIC\"}]','{}','{}','{}','[]','{}',1542255153778),(11,'base','nebula','ORDER_CANCEL','订单-取消','订单-取消','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ORDER_CANCEL\"}]','{}','{}','{}','[]','{}',1542255153793),(12,'base','nebula','ORDER_SUBMIT','订单-提交','订单-提交','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{}','{}','{}','[]','{}',1542255153808),(13,'base','nebula','TRANSACTION_BANKCRD_BIND','支付-绑卡','支付-绑卡','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_BANKCRD_BIND\"}]','{}','{}','{}','[]','{}',1542255153823),(14,'base','nebula','TRANSACTION_BANKCRD_UNBIND','支付-解绑','支付-解绑','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_BANKCRD_UNBIND\"}]','{}','{}','{}','[]','{}',1542255153837),(15,'base','nebula','TRANSACTION_DEPOSIT','支付-充值','支付-充值','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_DEPOSIT\"}]','{}','{}','{}','[]','{}',1542255153856),(16,'base','nebula','TRANSACTION_ESCROW','支付-第三方支付','支付-第三方支付','','','event','','','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_ESCROW\"}]','{}','{}','{}','[]','{}',1542255153880),(17,'base','nebula','TRANSACTION_WITHDRAW','支付-取现','支付-取现','','enable','event','','','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_WITHDRAW\"}]','{}','{}','{}','[]','{}',1542255153897),(18,'base','nebula','HTTP_CLICK','点击','点击','','enable','filter','','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"type\": \"or\", \"condition\": [{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"POST\", \"type\": \"simple\", \"param\": \"\"}, {\"type\": \"and\", \"condition\": [{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"GET\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"HTTP_DYNAMIC\", \"object\": \"s_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"contains\", \"value\": \"text/html\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"HTTP_DYNAMIC\", \"object\": \"s_bytes\", \"object_type\": \"long\", \"object_subtype\": \"\", \"operation\": \">\", \"value\": \"1000\", \"type\": \"simple\", \"param\": \"\"}]}]}','{}','{}','[]','{}',1542255153915),(19,'base','nebula','HTTP_INCIDENT','风险事件','风险事件','','enable','filter','','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"notices\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{}','{}','[]','{}',1542255153931),(20,'realtime','nebula','did__account_login_count__5m__rt','单个DID5分钟内登录请求总和','DID登录请求总数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154026),(21,'realtime','nebula','did__account_login_count_fail__5m__rt','单个DID5分钟内登陆失败总和','单个DID5分钟内登陆失败总和','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"F\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154050),(22,'realtime','nebula','did__account_login_distinct_count_password__5m__rt','单个DID5分钟内登陆的密码数量','DID不同登录密码数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154073),(23,'realtime','nebula','did__account_login_distinct_count_uid__5m__rt','单个DID5分钟内登陆的UID数量','DID登录不同UID数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154110),(24,'realtime','nebula','did__account_regist_count__5m__rt','单个DID5分钟内注册请求总和','DID注册请求总数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154135),(25,'realtime','nebula','did__account_regist_count_fail__5m__rt','单个DID5分钟内注册失败总和','单个DID5分钟内注册失败总和','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"F\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154166),(26,'realtime','nebula','did__account_regist_distinct_count_password__5m__rt','单个DID5分钟内注册的密码数量','DID不同注册密码数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154192),(27,'realtime','nebula','did__account_regist_distinct_count_uid__5m__rt','单个DID5分钟内注册的UID数量','DID注册不同UID数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154216),(28,'realtime','nebula','did__account_dynamic_distinct_count_geo_city__5m__rt','单个DID5分钟关联不同城市个数','DID关联不同城市数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"geo_city\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"geo_city\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154234),(29,'realtime','nebula','did__account_dynamic_distinct_count_ip__5m__rt','单个DID5分钟动态资源IP个数','DID关联IP数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154254),(30,'realtime','nebula','did__account_dynamic_distinct_count_uid__5m__rt','单个DID5分钟动态资源UID个数','DID关联UID数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154277),(31,'realtime','nebula','did__visit_dynamic_avg_cbytes__5m__rt','单个DID5分钟内请求大小平均值','单个DID5分钟内请求大小平均值','did','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"avg\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_bytes\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154307),(32,'realtime','nebula','did__visit_dynamic_count__5m__rt','单个DID5分钟动态资源访问量总和','DID动态资源请求量[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154335),(33,'realtime','nebula','did__visit_dynamic_count_get__5m__rt','单个DID5分钟动态资源GET请求总量','单个DID5分钟动态资源GET请求总量','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"GET\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154369),(34,'realtime','nebula','did__visit_dynamic_count_post__5m__rt','单个DID5分钟动态资源POST请求总量','单个DID5分钟动态资源POST请求总量','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"POST\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154392),(35,'realtime','nebula','did__visit_dynamic_distinct_count_page__5m__rt','单个DID5分钟动态资源访问page数量','DID动态请求不同页面数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154432),(36,'realtime','nebula','did__visit_dynamic_distinct_count_referer__5m__rt','单个DID5分钟动态资源使用referer数量','DID动态请求不同引用页面数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"referer\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"referer\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154464),(37,'realtime','nebula','did__visit_dynamic_var_cbytes__5m__rt','单个DID5分钟内请求大小方差值','单个DID5分钟内请求大小方差值','did','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"stddev\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_bytes\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154488),(38,'realtime','nebula','did__visit_count_static__5m__rt','单个DID5分钟静态资源访问量总和','DID静态资源请求量[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_STATIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_STATIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154512),(39,'realtime','nebula','did__visit_clicks_timediff__5m__rt','单个DID5分钟内最近两次点击时间差','单个DID5分钟内最近两次点击时间差','did','enable','sequence','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_CLICK\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"-\", \"source\": \"HTTP_CLICK\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154537),(40,'realtime','nebula','did__account_login_fail_ratio__5m__rt','单个DID分钟内登陆失败比例','DID登录失败比例[5m]','did','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"did__account_login_count_fail__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__account_login_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"did__account_login_count_fail__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154564),(41,'realtime','nebula','did__account_regist_fail_ratio__5m__rt','单个DID5分钟内注册失败比例','DID注册失败比例[5m]','did','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"did__account_regist_count_fail__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__account_regist_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"did__account_regist_count_fail__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154597),(42,'realtime','nebula','did__visit_count__5m__rt','单个DID5分钟访问量总和','DID请求量[5m]','did','enable','dual','long','','','[{\"app\": \"nebula\", \"name\": \"did__visit_count_static__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"+\", \"source\": \"did__visit_count_static__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154626),(43,'realtime','nebula','did__visit_dynamic_get_ratio__5m__rt','单个DID5分钟动态资源GET请求占比','DID动态请求GET占比[5m]','did','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_count_get__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"did__visit_dynamic_count_get__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154654),(44,'realtime','nebula','did__visit_dynamic_post_ratio__5m__rt','单个DID5分钟动态资源POST请求占比','DID动态请求POST占比[5m]','did','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_count_post__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"did__visit_dynamic_count_post__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154680),(45,'realtime','nebula','did__visit_dynamic_cv_cbytes__5m__rt','单个DID5分钟动态资源请求大小变异系数','DID动态请求大小变异系数[5m]','did','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_var_cbytes__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__visit_dynamic_avg_cbytes__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"did__visit_dynamic_var_cbytes__5m__rt\", \"object\": \"value\", \"object_type\": \"double\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154707),(46,'realtime','nebula','did__visit_clicks_avg_timediff__5m__rt','单个DID5分钟内点击时间差平均值','DID页面点击间隔平均值[5m]','did','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"did__visit_clicks_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"avg\", \"source\": \"did__visit_clicks_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154736),(47,'realtime','nebula','did__visit_clicks_var_timediff__5m__rt','单个DID5分钟内点击时间差方差值','单个DID5分钟内点击时间差方差值','did','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"did__visit_clicks_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"stddev\", \"source\": \"did__visit_clicks_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154763),(48,'realtime','nebula','did__visit_static_ratio__5m__rt','单个DID5分钟静态资源访问量占比','DID静态资源请求比[5m]','did','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"did__visit_count_static__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__visit_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"did__visit_count_static__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154788),(49,'realtime','nebula','did__visit_clicks_cv_timediff__5m__rt','单个DID5分钟内点击时间差变异系数','DID页面点击间隔变异系数[5m]','did','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"did__visit_clicks_var_timediff__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"did__visit_clicks_avg_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"did__visit_clicks_var_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"double\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255154826),(50,'realtime','nebula','global__visit_dynamic_count__5m__rt','5分钟动态资源访问量总和','5分钟动态资源访问量总和','global','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255154867),(51,'realtime','nebula','global__visit_static_count__5m__rt','5分钟静态资源访问量总和','5分钟静态资源访问量总和','global','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_STATIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_STATIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255154902),(52,'realtime','nebula','global__visit_count__5m__rt','5分钟访问量总和','5分钟访问量总和','global','enable','dual','long','','','[{\"app\": \"nebula\", \"name\": \"global__visit_static_count__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"global__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"+\", \"source\": \"global__visit_static_count__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255154930),(53,'realtime','nebula','ip__account_login_count__5m__rt','单个IP5分钟内登陆请求总和','IP登录请求总数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155091),(54,'realtime','nebula','ip__account_login_count_fail__5m__rt','单个IP5分钟内登陆失败总和','单个IP5分钟内登陆失败总和','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"F\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155121),(55,'realtime','nebula','ip__account_login_distinct_count_password__5m__rt','单个IP5分钟内登陆的密码数量','IP不同登录密码数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155152),(56,'realtime','nebula','ip__account_login_distinct_count_uid__5m__rt','单个IP5分钟内登陆的UID数量','IP登录不同UID数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155187),(57,'realtime','nebula','ip__account_regist_count__5m__rt','单个IP5分钟内注册请求总和','IP注册请求总数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155220),(58,'realtime','nebula','ip__account_regist_distinct_count_password__5m__rt','单个IP5分钟内注册的密码数量','IP不同注册密码数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155252),(59,'realtime','nebula','ip__account_regist_distinct_count_uid__5m__rt','单个IP5分钟内注册的UID数量','IP注册不同UID数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155285),(60,'realtime','nebula','ip__account_regist_fail_count__5m__rt','单个IP5分钟内注册失败总和','单个IP5分钟内注册失败总和','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"F\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155329),(61,'realtime','nebula','ip__visit_dynamic_avg_cbytes__5m__rt','单个IP5分钟内请求大小平均值','单个IP5分钟内请求大小平均值','ip','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"avg\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_bytes\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155366),(62,'realtime','nebula','ip__visit_dynamic_count__5m__rt','单个IP5分钟动态资源访问量总和','IP动态资源请求量[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155400),(63,'realtime','nebula','ip__visit_dynamic_count_get__5m__rt','单个IP5分钟动态资源GET请求总量','单个IP5分钟动态资源GET请求总量','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"GET\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155434),(64,'realtime','nebula','ip__visit_dynamic_count_post__5m__rt','单个IP5分钟动态资源POST请求总量','单个IP5分钟动态资源POST请求总量','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"POST\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155466),(65,'realtime','nebula','ip__visit_dynamic_distinct_count_did__5m__rt','单个IP5分钟内的不同DID个数','IP关联DID数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155503),(66,'realtime','nebula','ip__visit_dynamic_distinct_count_page__5m__rt','单个IP5分钟动态资源访问page数量','IP动态请求不同页面数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155535),(67,'realtime','nebula','ip__visit_dynamic_distinct_count_referer__5m__rt','单个IP5分钟访问动态资源使用referer数量','IP动态请求不同引用页面数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"referer\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"referer\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155570),(68,'realtime','nebula','ip__visit_dynamic_distinct_count_uid__5m__rt','单个IP5分钟内访问动态资源UID个数','IP关联UID数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155604),(69,'realtime','nebula','ip__visit_dynamic_var_cbytes__5m__rt','单个IP5分钟内请求大小方差值','单个IP5分钟内请求大小方差值','ip','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"stddev\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_bytes\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155645),(70,'realtime','nebula','ip__visit_static_count__5m__rt','单个IP5分钟静态资源访问量总和','IP静态资源请求量[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_STATIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_STATIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155696),(71,'realtime','nebula','ip__visit_clicks_count_refererhit__5m__rt','单个IP5分钟引用页面被请求数','IP引用页面被请求数[5m]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_CLICK\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_CLICK\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155741),(72,'realtime','nebula','ip__visit_clicks_timediff__5m__rt','单个IP5分钟内最近两次点击时间差','单个IP5分钟内最近两次点击时间差','ip','enable','sequence','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_CLICK\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"-\", \"source\": \"HTTP_CLICK\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155789),(73,'realtime','nebula','ip__account_login_fail_ratio__5m__rt','单个IP5分钟内登陆失败比例','IP登录失败比例[5m]','ip','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"ip__account_login_count_fail__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__account_login_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"ip__account_login_count_fail__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155834),(74,'realtime','nebula','ip__account_regist_fail_ratio__5m__rt','单个IP5分钟内注册失败比例','IP注册失败比例[5m]','ip','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"ip__account_regist_fail_count__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__account_regist_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"ip__account_regist_fail_count__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155884),(75,'realtime','nebula','ip__visit_dynamic_get_ratio__5m__rt','单个IP5分钟动态资源GET请求占比','IP动态请求GET占比[5m]','ip','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_count_get__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"ip__visit_dynamic_count_get__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155932),(76,'realtime','nebula','ip__visit_dynamic_post_ratio__5m__rt','单个IP5分钟动态资源POST请求占比','IP动态请求POST占比[5m]','ip','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_count_post__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"ip__visit_dynamic_count_post__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255155980),(77,'realtime','nebula','ip__visit_dynamic_cv_cbytes__5m__rt','单个IP5分钟动态资源请求大小变异系数','IP动态请求大小变异系数[5m]','ip','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_var_cbytes__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_avg_cbytes__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"ip__visit_dynamic_var_cbytes__5m__rt\", \"object\": \"value\", \"object_type\": \"double\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255156028),(78,'realtime','nebula','ip__visit_count__5m__rt','单个IP5分钟访问量总和','IP请求量[5m]','ip','enable','dual','long','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_static_count__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"+\", \"source\": \"ip__visit_static_count__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255156069),(79,'realtime','nebula','ip__visit_clicks_avg_timediff__5m__rt','单个IP5分钟内点击时间差平均值','IP页面点击间隔平均值[5m]','ip','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_clicks_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"avg\", \"source\": \"ip__visit_clicks_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255156108),(80,'realtime','nebula','ip__visit_clicks_var_timediff__5m__rt','单个IP5分钟内点击时间差方差值','单个IP5分钟内点击时间差方差值','ip','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_clicks_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"stddev\", \"source\": \"ip__visit_clicks_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255156151),(81,'realtime','nebula','ip__visit_static_ratio__5m__rt','单个IP5分钟静态资源访问量占比','单个IP5分钟静态资源访问量占比','ip','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_static_count__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__visit_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"ip__visit_static_count__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255156204),(82,'realtime','nebula','ip__visit_clicks_cv_timediff__5m__rt','单个IP5分钟内点击时间差变异系数','IP页面点击间隔变异系数[5m]','ip','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_clicks_var_timediff__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"ip__visit_clicks_avg_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"ip__visit_clicks_var_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"double\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255156248),(83,'realtime','nebula','uid__account_dynamic_distinct_count_did__5m__rt','单个UID5分钟动态资源DID个数','UID关联DID数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156290),(84,'realtime','nebula','uid__account_dynamic_distinct_count_geo_city__5m__rt','单个UID5分钟不同IP对应的地域个数','UID关联不同城市数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"geo_city\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"geo_city\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156329),(85,'realtime','nebula','uid__account_dynamic_distinct_count_ip__5m__rt','单个UID5分钟不同IP个数','UID关联IP数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156368),(86,'realtime','nebula','uid__order_cancel_count__5m__rt','UID5分钟内取消订单请求总次数  ','UID取消订单请求数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ORDER_CANCEL\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ORDER_CANCEL\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156409),(87,'realtime','nebula','uid__order_distinct_count_receiver_geo_city__5m__rt','UID5分钟内下单不同收货城市数','UID下单不同收货城市数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{\"source\": \"ORDER_SUBMIT\", \"object\": \"receiver_address_city\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ORDER_SUBMIT\", \"object\": \"receiver_address_city\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156449),(88,'realtime','nebula','uid__order_submit_count__5m__rt','UID5分钟内下单总次数','UID下单数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ORDER_SUBMIT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156491),(89,'realtime','nebula','uid__order_submit_count_fail__5m__rt','UID5分钟内下单失败总次数','UID5分钟内下单失败总次数','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{\"source\": \"ORDER_SUBMIT\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"F\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ORDER_SUBMIT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156540),(90,'realtime','nebula','uid__order_submit_count_succ__5m__rt','UID5分钟内下单成功总次数','用户下单成功数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{\"source\": \"ORDER_SUBMIT\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ORDER_SUBMIT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156582),(91,'realtime','nebula','uid__order_submit_distinct_count_merchant__5m__rt','UID5分钟内下单不同商户个数','UID下单不同商户数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{\"source\": \"ORDER_SUBMIT\", \"object\": \"merchant\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ORDER_SUBMIT\", \"object\": \"merchant\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156641),(92,'realtime','nebula','uid__order_submit_avg_order_money_amount__5m__rt','UID5分钟内平均下单成功金额','UID平均下单成功金额[5m]','uid','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{\"source\": \"ORDER_SUBMIT\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"avg\", \"source\": \"ORDER_SUBMIT\", \"object\": \"order_money_amount\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156685),(93,'realtime','nebula','uid__order_submit_fail_ratio__5m__rt','UID5分钟内下单成功比例','UID下单失败比例[5m]','uid','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"uid__order_submit_count_fail__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__order_submit_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"uid__order_submit_count_fail__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156738),(94,'realtime','nebula','did__visit_clicks_count_refererhit__5m__rt','单个DID5分钟引用页面被请求数','DID引用页面被请求数[5m]','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_CLICK\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_CLICK\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255156786),(95,'realtime','nebula','uid__visit_count_static__5m__rt','单个UID5分钟静态资源访问量总和','UID静态资源请求量[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_STATIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_STATIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156843),(96,'realtime','nebula','uid__visit_dynamic_count__5m__rt','单个UID5分钟动态资源访问量总和','UID动态资源请求量[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156892),(97,'realtime','nebula','uid__visit_count__5m__rt','单个UID5分钟访问量总和','UID请求量[5m]','uid','enable','dual','long','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_count_static__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"+\", \"source\": \"uid__visit_count_static__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156941),(98,'realtime','nebula','uid__visit_static_ratio__5m__rt','单个UID5分钟静态资源访问量占比','UID静态资源请求比[5m]','uid','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_count_static__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__visit_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"uid__visit_count_static__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255156987),(99,'realtime','nebula','uid__visit_dynamic_distinct_count_page__5m__rt','单个UID5分钟动态资源访问page数量','UID动态请求不同页面数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157033),(100,'realtime','nebula','uid__visit_dynamic_distinct_count_referer__5m__rt','单个UID5分钟动态资源使用referer数量','UID动态请求不同引用页面数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"referer\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"referer\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157078),(101,'realtime','nebula','uid__visit_dynamic_count_get__5m__rt','单个UID5分钟动态资源GET请求总量','单个UID5分钟动态资源GET请求总量','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"GET\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157131),(102,'realtime','nebula','uid__visit_dynamic_count_post__5m__rt','单个UID5分钟动态资源POST请求总量','单个UID5分钟动态资源POST请求总量','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"method\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"POST\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157180),(103,'realtime','nebula','uid__visit_dynamic_get_ratio__5m__rt','单个UID5分钟动态资源GET请求占比','UID动态请求GET占比[5m]','uid','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_count_get__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"uid__visit_dynamic_count_get__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157230),(104,'realtime','nebula','uid__visit_dynamic_post_ratio__5m__rt','单个UID5分钟动态资源POST请求占比','UID动态请求POST占比[5m]','uid','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_count_post__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"uid__visit_dynamic_count_post__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157285),(105,'realtime','nebula','uid__visit_dynamic_avg_cbytes__5m__rt','单个UID5分钟内请求大小平均值','单个UID5分钟内请求大小平均值','uid','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"avg\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_bytes\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157336),(106,'realtime','nebula','uid__visit_dynamic_var_cbytes__5m__rt','单个UID5分钟内请求大小方差值','单个UID5分钟内请求大小方差值','uid','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"stddev\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_bytes\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157401),(107,'realtime','nebula','uid__visit_dynamic_cv_cbytes__5m__rt','单个UID5分钟动态资源请求大小变异系数','UID动态请求大小变异系数[5m]','uid','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_var_cbytes__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_avg_cbytes__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"uid__visit_dynamic_var_cbytes__5m__rt\", \"object\": \"value\", \"object_type\": \"double\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157451),(108,'realtime','nebula','uid__visit_clicks_count_refererhit__5m__rt','单个UID5分钟引用页面被请求数','UID引用页面被请求数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_CLICK\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"HTTP_CLICK\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157501),(109,'realtime','nebula','uid__visit_clicks_timediff__5m__rt','单个UID5分钟内最近两次点击时间差','单个UID5分钟内最近两次点击时间差','uid','enable','sequence','long','','','[{\"app\": \"nebula\", \"name\": \"HTTP_CLICK\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"-\", \"source\": \"HTTP_CLICK\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157551),(110,'realtime','nebula','uid__visit_clicks_avg_timediff__5m__rt','单个UID5分钟内点击时间差平均值','UID页面点击间隔平均值[5m]','uid','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_clicks_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"avg\", \"source\": \"uid__visit_clicks_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157601),(111,'realtime','nebula','uid__visit_clicks_var_timediff__5m__rt','单个UID5分钟内点击时间差方差值','单个UID5分钟内点击时间差方差值','uid','enable','aggregate','double','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_clicks_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"stddev\", \"source\": \"uid__visit_clicks_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157654),(112,'realtime','nebula','uid__visit_clicks_cv_timediff__5m__rt','单个UID5分钟内点击时间差变异系数','UID页面点击间隔变异系数[5m]','uid','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_clicks_var_timediff__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__visit_clicks_avg_timediff__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"uid__visit_clicks_var_timediff__5m__rt\", \"object\": \"value\", \"object_type\": \"double\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157705),(113,'realtime','nebula','uid__account_login_count__5m__rt','单个UID5分钟内登录请求总和','UID登录请求总数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157758),(114,'realtime','nebula','uid__account_login_distinct_count_password__5m__rt','单个UID5分钟内登陆的密码数量','UID不同登录密码数[5m]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"distinct_count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"password\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157810),(115,'realtime','nebula','uid__account_login_count_fail__5m__rt','单个UID5分钟内登陆失败总和','单个UID5分钟内登陆失败总和','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"F\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157862),(116,'realtime','nebula','uid__account_login_fail_ratio__5m__rt','单个UID分钟内登陆失败比例','UID登录失败比例[5m]','uid','enable','dual','double','','','[{\"app\": \"nebula\", \"name\": \"uid__account_login_count_fail__5m__rt\"}, {\"app\": \"nebula\", \"name\": \"uid__account_login_count__5m__rt\"}]','{}','{\"type\": \"last_n_seconds\", \"value\": \"300\"}','{\"method\": \"/\", \"source\": \"uid__account_login_count_fail__5m__rt\", \"object\": \"value\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255157922),(117,'slot','nebula','did__account_login_count__1h__slot',' 单个设备每小时登陆总量','单个设备每小时登陆总量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158119),(118,'slot','nebula','did__account_registration_count__1h__slot','单个设备每小时注册总量','单个设备每小时注册总量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158184),(119,'slot','nebula','did__visit_dynamic_count__1h__slot','单个设备每小时访问量','单个设备每小时访问量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158251),(120,'slot','nebula','did__visit_dynamic_distinct_count_ip__1h__slot','单个设备每小时关联ip数量','单个设备每小时关联ip数量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158311),(121,'slot','nebula','did__visit_dynamic_distinct_count_page__1h__slot','单个设备每小时动态资源关联page数量','单个设备每小时动态资源关联page数量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158373),(122,'slot','nebula','did__visit_dynamic_distinct_count_uid__1h__slot','单个设备每小时动态资源关联用户数量','单个设备每小时动态资源关联用户数量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158434),(123,'slot','nebula','did__visit_dynamic_distinct_count_useragent__1h__slot','单个设备每小时动态资源关联useragent数量','单个设备每小时动态资源关联useragent数量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"useragent\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"useragent\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158497),(124,'slot','nebula','did_ip__visit_dynamic_group_count__1h__slot','单个设备上每个ip当前小时动态资源访问数','did_ip__visit_dynamic_group_count__1h__slot','did','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"c_ip\", \"config\": {}}','[\"did\"]','{}',1542255158557),(125,'slot','nebula','did_page__visit_dynamic_group_count__1h__slot','单个设备上每个页面当前小时动态资源访问数','单个设备上每个页面当前小时动态资源访问数','did','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"page\", \"config\": {}}','[\"did\"]','{}',1542255158613),(126,'slot','nebula','did_uid__visit_dynamic_group_count__1h__slot','单个设备上每个用户当前小时动态资源访问数','单个设备上每个用户当前小时动态资源访问数','did','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"uid\", \"config\": {}}','[\"did\"]','{}',1542255158672),(127,'slot','nebula','did_useragent__visit_dynamic_group_count__1h__slot','单个设备上每个agent当前小时动态资源访问数','单个设备上每个agent当前小时动态资源访问数','did','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"useragent\", \"config\": {}}','[\"did\"]','{}',1542255158731),(128,'slot','nebula','did_geo_city__visit_dynamic_group_count__1h__slot','单个did每小时每个城市的动态资源访问数量','单个did每小时每个城市的动态资源访问数量','did','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"geo_city\", \"config\": {}}','[\"did\"]','{}',1542255158790),(129,'slot','nebula','did__visit_incident_count__1h__slot','单个设备每小时风险访问量','单个设备每小时风险访问量','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_INCIDENT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255158850),(130,'slot','nebula','did__visit_dynamic_count_top100__1h__slot','每小时访问量前100的did','每小时访问量前100的did','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did__visit_dynamic_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[]','{}',1542255158910),(131,'slot','nebula','did__visit_dynamic_distinct_count_ip_top100__1h__slot','每小时关联ip量前100的did','每小时关联ip前100的did','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_distinct_count_ip__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did__visit_dynamic_distinct_count_ip__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[]','{}',1542255158974),(132,'slot','nebula','did__visit_dynamic_distinct_count_page_top100__1h__slot','每小时关联page量前100的did','每小时关联page前100的did','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_distinct_count_page__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did__visit_dynamic_distinct_count_page__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[]','{}',1542255159033),(133,'slot','nebula','did__visit_dynamic_distinct_count_uid_top100__1h__slot','每小时关联uid量前100的did','每小时关联uid前100的did','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_distinct_count_uid__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did__visit_dynamic_distinct_count_uid__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[]','{}',1542255159108),(134,'slot','nebula','did_ip__visit_dynamic_count_top20__1h__slot','单个设备访问的前20的ip','单个设备访问的前20的ip','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did_ip__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did_ip__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[\"did\"]','{}',1542255159187),(135,'slot','nebula','did_page__visit_dynamic_count_top20__1h__slot','单个设备访问的前20的页面','单个设备访问的前20的页面','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did_page__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did_page__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"page\", \"config\": {}}','[\"did\"]','{}',1542255159254),(136,'slot','nebula','did_uid__visit_dynamic_count_top20__1h__slot','单个设备访问量前20的用户','单个设备访问量前20的用户','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did_uid__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did_uid__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[\"did\"]','{}',1542255159333),(137,'slot','nebula','did_useragent__visit_dynamic_count_top20__1h__slot','单个设备访问的前20的agent','单个设备访问的前20的agent','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did_useragent__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did_useragent__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"useragent\", \"config\": {}}','[\"did\"]','{}',1542255159407),(138,'slot','nebula','did_geo_city__visit_dynamic_count_top20__1h__slot','单个did访问的前20的城市','单个did访问的前20的城市','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did_geo_city__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did_geo_city__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"geo_city\", \"config\": {}}','[\"did\"]','{}',1542255159497),(139,'slot','nebula','did__visit_incident_count_top100__1h__slot','每小时风险访问量前100的did','每小时风险访问量前100的did','did','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"did__visit_incident_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"did__visit_incident_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[]','{}',1542255159568),(140,'slot','nebula','global__marketing_count__1h__slot','每小时营销活动次数','每小时营销活动次数','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACTIVITY_DO\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACTIVITY_DO\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255159631),(141,'slot','nebula','global__marketing_incident_count__1h__slot','每小时风险营销活动次数','每小时风险营销活动次数','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACTIVITY_DO\"}]','{\"source\": \"ACTIVITY_DO\", \"object\": \"notices\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACTIVITY_DO\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255159696),(142,'slot','nebula','global__visit_dynamic_count__1h__slot','本小时动态资源访问总量','本小时动态资源访问总量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255159772),(143,'slot','nebula','global__visit_dynamic_distinct_count_did__1h__slot','本小时动态资源访问设备数量','本小时动态资源访问设备数量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255159842),(144,'slot','nebula','global__visit_dynamic_distinct_count_ip__1h__slot','本小时动态资源访问IP数量','本小时动态资源访问IP数量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255159912),(145,'slot','nebula','global__visit_dynamic_distinct_count_uid__1h__slot','本小时动态资源访问用户数量','本小时动态资源访问用户数量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255159977),(146,'slot','nebula','global__order_submit_count__1h__slot','本小时订单提交总量','本小时订单提交总量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ORDER_SUBMIT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160045),(147,'slot','nebula','global__order_submit_incident_count__1h__slot','本小时订单风险提交总量','本小时订单风险提交总量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ORDER_SUBMIT\"}]','{\"source\": \"ORDER_SUBMIT\", \"object\": \"notices\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ORDER_SUBMIT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160111),(148,'slot','nebula','global__transaction_withdraw_count__1h__slot','每小时交易总数','每小时交易总数','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_WITHDRAW\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"TRANSACTION_WITHDRAW\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160177),(149,'slot','nebula','global__transaction_withdraw_incident_count__1h__slot','每小时交易风险总数','每小时交易风险总数','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_WITHDRAW\"}]','{\"source\": \"TRANSACTION_WITHDRAW\", \"object\": \"notices\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"TRANSACTION_WITHDRAW\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160242),(150,'slot','nebula','global__transaction_withdraw_incident_sum_withdraw_amount__1h__slot','每小时风险交易总额','每小时风险交易总额','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_WITHDRAW\"}]','{\"source\": \"TRANSACTION_WITHDRAW\", \"object\": \"notices\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"sum\", \"source\": \"TRANSACTION_WITHDRAW\", \"object\": \"withdraw_amount\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160305),(151,'slot','nebula','global__transaction_withdraw_sum_withdraw_amount__1h__slot','每小时交易总额','每小时交易总额','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_WITHDRAW\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"sum\", \"source\": \"TRANSACTION_WITHDRAW\", \"object\": \"withdraw_amount\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160389),(152,'slot','nebula','global__visit_incident_count__1h__slot','本小时风险事件数量','本小时风险事件数量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_INCIDENT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160469),(153,'slot','nebula','global__visit_incident_distinct_count_ip__1h__slot','本小时动态资源访问风险IP数量','本小时动态资源访问风险IP数量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{\"source\": \"HTTP_INCIDENT\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_INCIDENT\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160558),(154,'slot','nebula','global__visit_incident_distinct_count_uid__1h__slot','本小时动态资源访问风险UID数量','本小时动态资源访问风险UID数量','global','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{\"source\": \"HTTP_INCIDENT\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_INCIDENT\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[]','{}',1542255160642),(155,'slot','nebula','ip__account_login_count__1h__slot','单个ip每小时账号登陆次数','单个ip每小时账号登陆次数','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255160706),(156,'slot','nebula','ip__account_registration_count__1h__slot','单个ip每小时账号注册次数[1h]','单个ip账号注册次数','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255160772),(157,'slot','nebula','ip__visit_dynamic_count__1h__slot','单个ip本小时动态资源访问数量','单个ip本小时动态资源访问数量','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255160839),(158,'slot','nebula','ip__visit_dynamic_distinct_count_did__1h__slot','单个ip本小时动态资源访问关联DID数量','单个ip本小时动态资源访问关联DID数量','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255160906),(159,'slot','nebula','ip__visit_dynamic_distinct_count_page__1h__slot','单个ip本小时动态资源访问关联页面数量','单个ip本小时动态资源访问关联页面数量','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255160972),(160,'slot','nebula','ip__visit_dynamic_distinct_count_uid__1h__slot','单个ip本小时动态资源访问关联用户数量','单个ip本小时动态资源访问关联用户数量','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255161038),(161,'slot','nebula','ip__visit_dynamic_distinct_count_useragent__1h__slot','单个ip每小时每个ua的动态资源请求数量','单个ip每小时每个ua的动态资源请求数量','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"useragent\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"useragent\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255161121),(162,'slot','nebula','ip_did__visit_dynamic_group_count__1h__slot','单个ip上每个设备当前小时动态资源访问数','单个ip上每个设备当前小时动态资源访问数','ip','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"did\", \"config\": {}}','[\"c_ip\"]','{}',1542255161192),(163,'slot','nebula','ip_page__visit_dynamic_group_count__1h__slot','单个ip本小时内每个页面的动态资源访问数量','单个ip本小时内每个页面的动态资源访问数量','ip','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"page\", \"config\": {}}','[\"c_ip\"]','{}',1542255161270),(164,'slot','nebula','ip_uid__visit_dynamic_group_count__1h__slot','单个ip本小时内每个用户的动态资源访问数量','单个ip本小时内每个用户的动态资源访问数量','ip','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"uid\", \"config\": {}}','[\"c_ip\"]','{}',1542255161337),(165,'slot','nebula','ip_useragent__visit_dynamic_group_count__1h__slot','单个ip本小时内每个ua的动态资源访问数量','单个ip本小时内每个ua的动态资源访问数量','ip','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"useragent\", \"config\": {}}','[\"c_ip\"]','{}',1542255161408),(166,'slot','nebula','ip_geo_city__visit_dynamic_group_count__1h__slot','单个ip每小时每个城市的动态资源访问数量','单个ip每小时每个城市的动态资源访问数量','ip','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"geo_city\", \"config\": {}}','[\"c_ip\"]','{}',1542255161479),(167,'slot','nebula','ip__visit_incident_count__1h__slot','单个IP每小时风险访问量','单个IP每小时风险访问量','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_INCIDENT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255161556),(168,'slot','nebula','ip__visit_dynamic_count_top100__1h__slot','每小时访问量前100的ip','每小时访问量前100的ip','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip__visit_dynamic_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[]','{}',1542255161630),(169,'slot','nebula','ip__visit_dynamic_distinct_count_did_top100__1h__slot','每小时关联did量前100的ip','每小时关联did前100的ip','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_distinct_count_did__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip__visit_dynamic_distinct_count_did__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[]','{}',1542255161706),(170,'slot','nebula','ip__visit_dynamic_distinct_count_page_top100__1h__slot','每小时关联page量前100的ip','每小时关联page前100的ip','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_distinct_count_page__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip__visit_dynamic_distinct_count_page__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[]','{}',1542255161780),(171,'slot','nebula','ip__visit_dynamic_distinct_count_uid_top100__1h__slot','每小时关联uid量前100的ip','每小时关联uid前100的ip','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_distinct_count_uid__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip__visit_dynamic_distinct_count_uid__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[]','{}',1542255161854),(172,'slot','nebula','ip_did__visit_dynamic_count_top20__1h__slot','单个IP访问的前20的设备','单个IP访问的前20的设备','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip_did__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip_did__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[\"c_ip\"]','{}',1542255161930),(173,'slot','nebula','ip_page__visit_dynamic_count_top20__1h__slot','单个IP访问的前20的页面','单个IP访问的前20的页面','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip_page__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip_page__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"page\", \"config\": {}}','[\"c_ip\"]','{}',1542255162006),(174,'slot','nebula','ip_uid__visit_dynamic_count_top20__1h__slot','单个IP访问的前20的uid','单个IP访问的前20的uid','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip_uid__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip_uid__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[\"c_ip\"]','{}',1542255162078),(175,'slot','nebula','ip_useragent__visit_dynamic_count_top20__1h__slot','单个IP访问的前20的useragent','单个IP访问的前20的useragent','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip_useragent__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip_useragent__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"useragent\", \"config\": {}}','[\"c_ip\"]','{}',1542255162151),(176,'slot','nebula','ip_geo_city__visit_dynamic_count_top20__1h__slot','单个ip访问的前20的城市','单个ip访问的前20的城市','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip_geo_city__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip_geo_city__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"geo_city\", \"config\": {}}','[\"c_ip\"]','{}',1542255162233),(177,'slot','nebula','ip__visit_incident_count_top100__1h__slot','每小时风险访问量前100的ip','每小时风险访问量前100的ip','ip','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"ip__visit_incident_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"ip__visit_incident_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[]','{}',1542255162327),(178,'slot','nebula','page__visit_dynamic_count__1h__slot','单个页面每小时动态访问量','单个页面每小时动态访问量','page','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"page\"]','{}',1542255162427),(179,'slot','nebula','page__visit_dynamic_distinct_count_did__1h__slot','单个页面每小时动态资源访问关联设备数','单个页面每小时动态资源访问关联设备数','page','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"page\"]','{}',1542255162518),(180,'slot','nebula','page__visit_dynamic_distinct_count_ip__1h__slot','单个页面每小时动态资源访问关联ip数','单个页面每小时动态资源访问关联ip数','page','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"page\"]','{}',1542255162619),(181,'slot','nebula','page__visit_dynamic_distinct_count_uid__1h__slot','单个页面每小时动态资源访问关联用户数','单个页面每小时动态资源访问关联用户数','page','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"uid\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"page\"]','{}',1542255162877),(182,'slot','nebula','page_did__visit_dynamic_group_count__1h__slot','单个页面上每个设备当前小时访问数','单个页面上每个设备当前小时访问数','page','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"did\", \"config\": {}}','[\"page\"]','{}',1542255162957),(183,'slot','nebula','page_did__visit_dynamic_count_top100__1h__slot','单个页面上访问量前100的did','单个页面上访问量前100的did','page','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"page_did__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"page_did__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[\"page\"]','{}',1542255163042),(184,'slot','nebula','page_ip__visit_dynamic_group_count__1h__slot','单个页面上每个ip当前小时访问数','单个页面上每个ip当前小时访问数','page','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"c_ip\", \"config\": {}}','[\"page\"]','{}',1542255163124),(185,'slot','nebula','page_ip__visit_dynamic_count_top100__1h__slot','单个页面上访问量前100的ip','单个页面上访问量前100的ip','page','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"page_ip__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"page_ip__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[\"page\"]','{}',1542255163203),(186,'slot','nebula','page_uid__visit_dynamic_group_count__1h__slot','单个页面上每个用户当前小时访问数','单个页面上每个用户当前小时访问数','page','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"uid\", \"config\": {}}','[\"page\"]','{}',1542255163280),(187,'slot','nebula','page_uid__visit_dynamic_count_top100__1h__slot','单个页面上访问量前100的uid','单个页面上访问量前100的uid','page','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"page_uid__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"page_uid__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[\"page\"]','{}',1542255163360),(188,'slot','nebula','page__visit_incident_count__1h__slot','单个页面每小时风险访问量','单个页面每小时风险访问量','page','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_INCIDENT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"page\"]','{}',1542255163436),(189,'slot','nebula','uid__account_login_count__1h__slot','单个用户本小时登陆量','单个用户本小时登陆量','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255163513),(190,'slot','nebula','uid__account_registration_count__1h__slot','单个用户本小时注册量','单个用户本小时注册量','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255163597),(191,'slot','nebula','uid__visit_dynamic_count__1h__slot','单个用户本小时内动态资源访问总和','单个用户本小时内动态资源访问总和','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255163684),(192,'slot','nebula','uid__visit_dynamic_distinct_count_did__1h__slot','单个用户本小时内动态资源访问关联设备数量','单个用户本小时内动态资源访问关联设备数量','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255163769),(193,'slot','nebula','uid__visit_dynamic_distinct_count_ip__1h__slot','单个用户本小时内动态资源访问关联ip数量','单个用户本小时内动态资源访问关联ip数量','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255163849),(194,'slot','nebula','uid__visit_dynamic_distinct_count_page__1h__slot','单个用户本小时内动态资源访问关联page数量','单个用户本小时内动态资源访问关联page数量','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"page\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255163940),(195,'slot','nebula','uid__visit_dynamic_distinct_count_useragent__1h__slot','单个用户本小时内动态资源访问关联useragent数量 ','单个用户本小时内动态资源访问关联useragent数量','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{\"source\": \"HTTP_DYNAMIC\", \"object\": \"useragent\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"!=\", \"value\": \"\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"useragent\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255164024),(196,'slot','nebula','uid__visit_dynamic_last_timestamp__1h__slot','单个用户每小时最后的访问时间','单个用户每小时最后的访问时间','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"last\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255164109),(197,'slot','nebula','uid_did__visit_dynamic_group_count__1h__slot','单个用户每小时每个设备的动态资源访问数量','单个用户每小时每个设备的动态资源访问数量','uid','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"did\", \"config\": {}}','[\"uid\"]','{}',1542255164191),(198,'slot','nebula','uid_geo_city__visit_dynamic_group_count__1h__slot','单个用户每小时每个城市的动态资源访问数量','单个用户每小时每个城市的动态资源访问数量','uid','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"geo_city\", \"config\": {}}','[\"uid\"]','{}',1542255164271),(199,'slot','nebula','uid_ip__visit_dynamic_group_count__1h__slot','单个用户每小时每个ip的动态资源访问数量','单个用户每小时每个ip的动态资源访问数量','uid','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"c_ip\", \"config\": {}}','[\"uid\"]','{}',1542255164350),(200,'slot','nebula','uid_page__visit_dynamic_group_count__1h__slot','单个用户每小时每个页面的动态资源访问数量','单个用户每小时每个页面的动态资源访问数量','uid','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"page\", \"config\": {}}','[\"uid\"]','{}',1542255164433),(201,'slot','nebula','uid_useragent__visit_dynamic_group_count__1h__slot','单个用户每小时每个useragent的动态资源访问数量','单个用户每小时每个useragent的动态资源访问数量','uid','enable','aggregate','mmap','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_DYNAMIC\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"group_count\", \"source\": \"HTTP_DYNAMIC\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"useragent\", \"config\": {}}','[\"uid\"]','{}',1542255164515),(202,'slot','nebula','uid__visit_incident_count__1h__slot','单个UID每小时风险访问量','单个UID每小时风险访问量','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"count\", \"source\": \"HTTP_INCIDENT\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255164615),(203,'slot','nebula','uid__account_registration_count_top100__1h__slot','注册量前100的user','注册量前100的user','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid__account_registration_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid__account_registration_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[]','{}',1542255164702),(204,'slot','nebula','uid__visit_dynamic_count_top100__1h__slot','每小时访问量前100的uid','每小时访问量前100的uid','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid__visit_dynamic_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[]','{}',1542255164811),(205,'slot','nebula','uid__visit_dynamic_distinct_count_did_top100__1h__slot','每小时关联did量前100的uid','每小时关联did前100的uid','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_distinct_count_did__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid__visit_dynamic_distinct_count_did__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[]','{}',1542255164901),(206,'slot','nebula','uid__visit_dynamic_distinct_count_ip_top100__1h__slot','每小时关联ip量前100的uid','每小时关联ip前100的uid','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_distinct_count_ip__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid__visit_dynamic_distinct_count_ip__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[]','{}',1542255164984),(207,'slot','nebula','uid__visit_dynamic_distinct_count_page_top100__1h__slot','每小时关联page量前100的uid','每小时关联page前100的uid','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_distinct_count_page__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid__visit_dynamic_distinct_count_page__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[]','{}',1542255165068),(208,'slot','nebula','uid_did__visit_dynamic_count_top20__1h__slot','每个user每个小时访问量前20的agent','每个user每个小时访问量前20的agent','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid_did__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid_did__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"did\", \"config\": {}}','[\"uid\"]','{}',1542255165153),(209,'slot','nebula','uid_geo_city__visit_dynamic_count_top20__1h__slot','单个用户访问的前20的城市','单个用户访问的前20的城市','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid_geo_city__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid_geo_city__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"geo_city\", \"config\": {}}','[\"uid\"]','{}',1542255165243),(210,'slot','nebula','uid_ip__visit_dynamic_count_top20__1h__slot','单个UID访问的前20的ip','单个UID访问的前20的ip','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid_ip__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid_ip__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"c_ip\", \"config\": {}}','[\"uid\"]','{}',1542255165333),(211,'slot','nebula','uid_page__visit_dynamic_count_top20__1h__slot','单个UID访问的前20的页面','单个UID访问的前20的页面','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid_page__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid_page__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"page\", \"config\": {}}','[\"uid\"]','{}',1542255165424),(212,'slot','nebula','uid_useragent__visit_dynamic_count_top20__1h__slot','每个user每个小时访问量前20的agent','每个user每个小时访问量前20的agent','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid_useragent__visit_dynamic_group_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid_useragent__visit_dynamic_group_count__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"useragent\", \"config\": {}}','[\"uid\"]','{}',1542255165524),(213,'slot','nebula','uid__visit_incident_count_top100__1h__slot','每小时风险访问量前100的uid','每小时风险访问量前100的uid','uid','enable','top','mmap','long','','[{\"app\": \"nebula\", \"name\": \"uid__visit_incident_count__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"top\", \"source\": \"uid__visit_incident_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"uid\", \"config\": {}}','[]','{}',1542255165612),(214,'slot','nebula','ip__visit_incident_first_timestamp__1h__slot','单个IP风险事件初始时间','单个IP风险事件初始时间','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"HTTP_INCIDENT\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"first\", \"source\": \"HTTP_INCIDENT\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255165703),(215,'profile','nebula','ip__visit_distinct_uid__1h__profile','ip每小时关联uid数量','','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_distinct_count_uid__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"merge\", \"source\": \"ip__visit_dynamic_distinct_count_uid__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255169989),(216,'profile','nebula','uid__account_login_count_succ__profile','用户登录成功次数','用户登录成功次数[total]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255166074),(217,'profile','nebula','uid__account_login_distinct_did__1h_profile','账号登陆成功did按小时去重列表','账号登陆成功did按小时去重列表','uid','enable','aggregate','mlist','string','did','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"distinct\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255166164),(218,'profile','nebula','uid__account_login_geocity_last10__profile','账号最近10条登录城市','账号最近10条登录城市','uid','enable','aggregate','list','string','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"lastn\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"geo_city\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"10\", \"config\": {}}','[\"uid\"]','{}',1542255166260),(219,'profile','nebula','uid__account_login_ip_last10__profile','账号最近10条登录IP','账号最近10条登录IP','uid','enable','aggregate','list','string','ip','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"lastn\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"10\", \"config\": {}}','[\"uid\"]','{}',1542255166355),(220,'profile','nebula','uid__account_login_timestamp_last10__profile','账号最近10条登录时间','账号最近10条登录时间','uid','enable','aggregate','list','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"lastn\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"10\", \"config\": {}}','[\"uid\"]','{}',1542255166449),(221,'profile','nebula','uid_did__account_login_count_succ__profile','账号登录成功did去重列表，并按照次数自增','账号登录成功did去重列表，并按照次数自增','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"group_count\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"did\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255166548),(222,'profile','nebula','uid__account_register_timestamp__profile','用户注册时间','用户注册时间','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255166684),(223,'profile','nebula','uid__registration__account__ip__profile','用户注册时的ip','','uid','enable','aggregate','string','','ip','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255166822),(224,'profile','nebula','uid__registration__account__mail__profile','用户注册邮箱','用户注册邮箱','uid','enable','aggregate','string','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"register_verification_token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"email\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"register_verification_token\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167048),(225,'profile','nebula','uid__registration__account__mobile__profile','用户注册手机','用户注册手机','uid','enable','aggregate','string','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"register_verification_token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"mobile\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"register_verification_token\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167142),(226,'profile','nebula','uid__registration__account__username__profile','用户注册用户名','用户注册用户名','uid','enable','aggregate','string','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_REGISTRATION\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_REGISTRATION\", \"object\": \"user_name\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167242),(227,'profile','nebula','uid__account_token_change_mail__profile','帐号修改的邮箱','帐号修改的邮箱','uid','enable','aggregate','string','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"email\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"new_token\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167333),(228,'profile','nebula','uid__account_token_change_mail_count__profile','账号累计修改邮箱次数','账号累计修改邮箱次数','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"email\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167461),(229,'profile','nebula','uid__account_token_change_mail_last_timestamp__profile','账号最近修改邮箱时间','账号最近修改邮箱时间','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"email\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167584),(230,'profile','nebula','uid__account_token_change_mail_timestamp__profile','帐号修改的邮箱的时间','','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"email\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167677),(231,'profile','nebula','uid__account_token_change_mobile__profile','帐号修改的手机号','帐号修改的手机号','uid','enable','aggregate','string','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"mobile\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"new_token\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167771),(232,'profile','nebula','uid__account_token_change_mobile_count__profile','账号修改手机号次数','账号修改手机号次数','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"mobile\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"count\", \"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"\", \"object_type\": \"\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167871),(233,'profile','nebula','uid__account_token_change_mobile_timestamp__profile','帐号修改的手机号时间','帐号修改的手机号时间','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_TOKEN_CHANGE\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}, {\"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"token_type\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"mobile\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_TOKEN_CHANGE\", \"object\": \"timestamp\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255167970),(234,'profile','nebula','uid__transaction_withdraw_sum_withdraw_amount__1h__profile','账号每小时消费金额','账号每小时消费金额','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"TRANSACTION_WITHDRAW\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"sum\", \"source\": \"TRANSACTION_WITHDRAW\", \"object\": \"withdraw_amount\", \"object_type\": \"long\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168066),(235,'profile','nebula','uid__account_login_distinct_count_did_succ__1d__profile','用户当天登录成功不同did个数','用户登录成功不同did个数[1d]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"uid__account_login_distinct_did__1h_profile\"}]','{}','{\"type\": \"last_n_days\"}','{\"method\": \"distinct_count\", \"source\": \"uid__account_login_distinct_did__1h_profile\", \"object\": \"value\", \"object_type\": \"mlist\", \"object_subtype\": \"string\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168165),(236,'profile','nebula','uid__alarm_count__profile',' 报警次数','报警次数','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_incident_count__1h__slot\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"merge_value\", \"source\": \"uid__visit_incident_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168266),(237,'profile','nebula','uid_timestamp__visit_dynamic_count__profile','用户访问时间偏好','用户访问时间偏好','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_count__1h__slot\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"merge_value\", \"source\": \"uid__visit_dynamic_count__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168362),(238,'profile','nebula','uid_geo_city__visit_dynamic_count__profile','用户主要访问地区来源','用户主要访问地区来源','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"uid_geo_city__visit_dynamic_count_top20__1h__slot\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"merge_value\", \"source\": \"uid_geo_city__visit_dynamic_count_top20__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168464),(239,'profile','nebula','uid_useragent__visit_dynamic_count__profile','用户访问User Agent分布','用户访问User Agent分布','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"uid_useragent__visit_dynamic_count_top20__1h__slot\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"merge_value\", \"source\": \"uid_useragent__visit_dynamic_count_top20__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168559),(240,'profile','nebula','uid_did__visit_dynamic_count__profile','用户访问设备分布','用户访问设备分布','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"uid_did__visit_dynamic_count_top20__1h__slot\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"merge_value\", \"source\": \"uid_did__visit_dynamic_count_top20__1h__slot\", \"object\": \"value\", \"object_type\": \"mmap\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168661),(241,'profile','nebula','uid__visit_dynamic_last_timestamp__profile',' 用户最后访问时间',' 用户最后访问时间','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_last_timestamp__1h__slot\"}]','{}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last_value\", \"source\": \"uid__visit_dynamic_last_timestamp__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255168776),(242,'profile','nebula','did__visit_distinct_ip__1h__profile','用每小时关联ip数量','用户每小时关联ip数','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_distinct_count_ip__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"merge\", \"source\": \"did__visit_dynamic_distinct_count_ip__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255168875),(243,'profile','nebula','did__visit_distinct_ip__1d__profile','did当天最多1小时关联ip数量','did当天最多1小时关联ip数量','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"did__visit_distinct_ip__1h__profile\"}]','{}','{\"type\": \"last_n_days\"}','{\"method\": \"max\", \"source\": \"did__visit_distinct_ip__1h__profile\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255168973),(244,'profile','nebula','did__visit_distinct_uid__1h__profile','did每小时关联uid数量','did每小时关联uid数','did','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"did__visit_dynamic_distinct_count_uid__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"merge\", \"source\": \"did__visit_dynamic_distinct_count_uid__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255169076),(245,'profile','nebula','did__visit_distinct_uid__1d__profile','did当天最多1小时关联uid数量','did当天最多1小时关联uid数量','did','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"did__visit_distinct_uid__1h__profile\"}]','{}','{\"type\": \"last_n_days\"}','{\"method\": \"max\", \"source\": \"did__visit_distinct_uid__1h__profile\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"did\"]','{}',1542255169177),(246,'profile','','uid__account_login_ip_last__profile','账号最近登录成功的ip','账号最近登录成功的ip','uid','enable','aggregate','string','','ip','[{\"app\": \"nebula\", \"name\": \"ACCOUNT_LOGIN\"}]','{\"type\": \"and\", \"condition\": [{\"source\": \"ACCOUNT_LOGIN\", \"object\": \"result\", \"object_type\": \"string\", \"object_subtype\": \"\", \"operation\": \"==\", \"value\": \"T\", \"type\": \"simple\", \"param\": \"\"}]}','{\"type\": \"ever\", \"value\": \"\"}','{\"method\": \"last\", \"source\": \"ACCOUNT_LOGIN\", \"object\": \"c_ip\", \"object_type\": \"string\", \"object_subtype\": \"\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255169286),(247,'profile','nebula','uid__visit_distinct_ip__1h__profile','用户每小时关联ip数量','','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_distinct_count_ip__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"merge\", \"source\": \"uid__visit_dynamic_distinct_count_ip__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255169387),(248,'profile','nebula','uid__visit_distinct_ip__1d__profile','UID当天最多1小时关联IP数量','UID当天最多1小时关联IP数量[1d]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_distinct_ip__1h__profile\"}]','{}','{\"type\": \"last_n_days\"}','{\"method\": \"max\", \"source\": \"uid__visit_distinct_ip__1h__profile\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255169487),(249,'profile','nebula','uid__visit_distinct_did__1h__profile','用户每小时关联did数量','','uid','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"uid__visit_dynamic_distinct_count_did__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"merge\", \"source\": \"uid__visit_dynamic_distinct_count_did__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255169586),(250,'profile','nebula','uid__visit_distinct_did__1d__profile','UID当天最多1小时关联DID数量','UID当天最多1小时关联DID数量[1d]','uid','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"uid__visit_distinct_did__1h__profile\"}]','{}','{\"type\": \"last_n_days\"}','{\"method\": \"max\", \"source\": \"uid__visit_distinct_did__1h__profile\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"uid\"]','{}',1542255169687),(251,'profile','nebula','ip__visit_distinct_did__1h__profile','ip每小时关联did数量','','ip','enable','aggregate','map','long','','[{\"app\": \"nebula\", \"name\": \"ip__visit_dynamic_distinct_count_did__1h__slot\"}]','{}','{\"type\": \"hourly\", \"value\": \"1\"}','{\"method\": \"merge\", \"source\": \"ip__visit_dynamic_distinct_count_did__1h__slot\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255169789),(252,'profile','nebula','ip__visit_distinct_did__1d__profile','IP当天最多1小时关联DID数量','IP当天最多1小时关联DID数量[1d]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_distinct_did__1h__profile\"}]','{}','{\"type\": \"last_n_days\"}','{\"method\": \"max\", \"source\": \"ip__visit_distinct_did__1h__profile\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255169889),(253,'profile','nebula','ip__visit_distinct_uid__1d__profile','IP当天最多1小时关联UID数量','IP当天最多1小时关联UID数量[1d]','ip','enable','aggregate','long','','','[{\"app\": \"nebula\", \"name\": \"ip__visit_distinct_uid__1h__profile\"}]','{}','{\"type\": \"last_n_days\"}','{\"method\": \"max\", \"source\": \"ip__visit_distinct_uid__1h__profile\", \"object\": \"value\", \"object_type\": \"map\", \"object_subtype\": \"long\", \"param\": \"\", \"config\": {}}','[\"c_ip\"]','{}',1542255170091);
/*!40000 ALTER TABLE `variablemodel_default` ENABLE KEYS */;
UNLOCK TABLES;
/*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */;

/*!40101 SET SQL_MODE=@OLD_SQL_MODE */;
/*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */;
/*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */;
/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
/*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;

grant all privileges on asset.* to 'nebula'@'%' identified by 'threathunter' with grant option;
grant all privileges on profile.* to 'nebula'@'%' identified by 'threathunter' with grant option;
grant all privileges on nebula.* to 'nebula'@'%' identified by 'threathunter' with grant option;
grant all privileges on nebula_data.* to 'nebula'@'%' identified by 'threathunter' with grant option;
grant all privileges on nebula_default.* to 'nebula'@'%' identified by 'threathunter' with grant option;
grant all privileges on sniffer_event_py.* to 'nebula'@'%' identified by 'threathunter' with grant option;
FLUSH PRIVILEGES; 

-- Dump completed on 2018-11-20  6:56:29