two count columns?

From: Jan Danielsson <jan(dot)danielsson(at)gmail(dot)com>
To: pgsql-sql(at)postgresql(dot)org
Subject: two count columns?
Date: 2006-02-17 23:56:52
Message-ID: 43F662C4.9070402@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-sql

Hello all,

I have written a small firewall, and sshd, logging system which uses
postgresql for storing the logs.

The table that stores the firewall logs has, among other columns,
from_ip, port and a timestamp.

I want to construct a query which returns the columns:

from_ip | port 22 entries | total entries | last_access

I have managed to put this together:

select from_ip, count(from_ip) as entries, max(ts)::timestamp(0) as
last_access from log where to_port=22 and direction='in' group by from_ip

So the only thing I'm missing is the total number of log entries
matching the from_ip, but that's where I'm stuck. My instinct is to try
to use subqueries:

select from_ip, count(from_ip) as entries, count(select * from log where
...) as tot_entries, max(ts)::timestamp(0) as last_access from log where
to_port=22 and direction='in' group by from_ip

..but count() doesn't take a subquery afaik, and how would I match the
from_ip in the inner select with the outer one? So I assume that
subqueries aren't the way yo go. Is there even a query to return those
columns in that configuration?

Thankful for any hints or tips.

--
Kind Regards,
Jan Danielsson
Te audire non possum. Musa sapientum fixa est in aure.

Responses

Browse pgsql-sql by date

  From Date Subject
Next Message Tom Lane 2006-02-18 00:47:22 Re: two count columns?
Previous Message Owen Jacobson 2006-02-17 23:08:11 Re: Given 02-01-2006 to 02-28-2006, output all days.