【其他】Falcon的数据查询

查询监控项

select
    *
from
    endpoint e inner join endpoint_counter c on e.id = c.endpoint_id where 
    c.counter = "metric_name" 
    and endpoint = "host_name"

模拟登录获取Cookie，Postman选form-data

# POST FORM, curl可以通过-b 将cookie输出到文件
curl -d "name=user&password=passwd" http://falconhost:port/auth/login

从接口获取监控数据

curl -H "Cookie:session=eyJvcGVuLWZhbGNvbi1jayI6ImppYW5neHU6NGUwOGM0YjM3ZjAwMTFlYTlmM2NlY2Y0YmJmMWFhAAQifQ.XpfQVQ._-QAoxYM--Xf7BKHfi64CU2hgwE" -X GET "http://falconhost:port/chart/h?cf=AVERAGE&end=1586943404&graph_type=h&id=8095&start=1586939864&sum=off&sumonly=off" | jq
{
  "units": "",
  "series": [
    {
      "counter": "metric/tags",
      "endpoint": "monitored_host",
      "data": [
        [
          1586940000000,
          1
        ],...
      ],
      "name": "monitored_host",
      "cf": "AVERAGE"
    }
  ],
  "title": "metric/tags"
}