误报分析(近 30 天)
误报分析(近 30 天)
SELECT rule_id,
COUNT(*) AS alerts,
SUM(CASE WHEN confirmed = 0 THEN 1 ELSE 0 END) AS false_alerts
FROM dq_alert_log
WHERE alert_time >= DATE_SUB(CURRENT_DATE(), INTERVAL 30 DAY)
GROUP BY rule_id
HAVING SUM(CASE WHEN confirmed = 0 THEN 1 ELSE 0 END) / COUNT(*) > 0.5;误报率高的规则会训练团队忽略告警:与其挂着,不如调整或明确下线并记录原因。