SQL语法 查询需求 查询语句 标准查询 SELECT "field" WHERE "field" 'value' 统计行数 SELECT count() 列的别名 SELECT count() AS "pv" 去重查询 SELECT DISTINCT("field") 或 select distinct field 分页查询 SELECT "field" LIMIT 100 排序查询 SELECT "ts" order by "ts" 分组查询 SELECT "field" GROUP BY "field" 分组统计 SELECT "field",count() GROUP BY "field" 模糊查询 SELECT where "field" like 'value%' 查询总和 SELECT sum("field") 查询最大值 SELECT max("field") 查询最小值 SELECT min("field") 查询平均值 SELECT avg("field") SQL嵌套子查询 SELECT sum(pv) FROM (SELECT "field",count() AS "pv" GROUP BY "field") HAVING子句过滤 SELECT "field",count() AS "pv" GROUP BY "field" HAVING "pv" > 10 查询包含GET,POST请求 SELECT WHERE "requestmethod" IN ('GET', 'POST') 查询不包含GET,POST请求 SELECT WHERE "requestmethod" NOT IN ('GET', 'POST') 查询非GET请求的日志 SELECT WHERE "requestmethod" ! 'GET' 查询GET请求成功并且状态码为200且请求时间小于60秒的日志 SELECT WHERE "requestmethod" 'GET' AND "requesttime" < 60 查询请求时间大于等于60秒,并且小于200秒的日志 SELECT WHERE "request time" >60 and "requesttime" < 200 查询GET请求或POST请求的日志 SELECT WHERE "requestmethod" 'GET' OR "requestmethod" 'POST'