Skip to content

Instantly share code, notes, and snippets.

@kgorman
Created October 25, 2019 15:00
Show Gist options
  • Save kgorman/4accaa93715c3c29fb51c92ffc7c184f to your computer and use it in GitHub Desktop.
Save kgorman/4accaa93715c3c29fb51c92ffc7c184f to your computer and use it in GitHub Desktop.
sample2.sql
-- detect multiple auths in a short window and
-- send to lock account topic/microservice
SELECT card,
MAX(amount) as theamount,
TUMBLE_END(eventTimestamp, interval '5' minute) as ts
FROM payments
WHERE lat IS NOT NULL
AND lon IS NOT NULL
GROUP BY card, TUMBLE(eventTimestamp, interval '5' minute)
HAVING COUNT(*) > 4 -- >4==fraud
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment