Input

field	value
Query:	SELECT 'Nginx/1.7.12' AS technology_name ,domain ,global_rank ,url_matchable AS url ,created AS first_seen ,last_seen ,CASE WHEN indicator_matchable[2] = 'plain' THEN 'lower(' || indicator_matchable[3] || '.' || indicator_matchable[4] || ') contains ''' || indicator_matchable[1] || '''' ELSE indicator_matchable[3] || '.' || indicator_matchable[4] || ' is regex match of ''' || indicator_matchable[1] || '''' END AS indicator FROM indicator_detection_domain_rollup WHERE (indicator_matchable[1] = 'nginx/1.7.12' AND indicator_matchable[2] = 'plain' AND indicator_matchable[3] = 'http_request' AND indicator_matchable[4] = 'response_headers') ORDER BY global_rank ASC NULLS LAST

Query Plan

Download: csv json

Query Plan
Limit (cost=3485.21..3486.06 rows=20 width=117)
-> Result (cost=3485.21..3521.68 rows=858 width=117)
-> Sort (cost=3485.21..3487.36 rows=858 width=168)
Sort Key: global_rank
-> Bitmap Heap Scan on indicator_detection_domain_rollup (cost=61.64..3462.38 rows=858 width=168)
Recheck Cond: ((indicator_matchable[1] = 'nginx/1.7.12'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))
-> Bitmap Index Scan on indicator_detection_domain_rollup_indicator_matchable_arr_idx (cost=0.00..61.43 rows=858 width=0)
Index Cond: ((indicator_matchable[1] = 'nginx/1.7.12'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))

Data

Total Results: 2 Download: csv json

Technology Name	Domain	Global Rank	Url	First Seen	Last Seen	Indicator
Nginx/1.7.12	nixp.ru	403970.0	www.nixp.ru	2023-10-15 13:56:11.281939+00:00	2024-12-10 16:18:54.878711+00:00	lower(http_request.response_headers) contains 'nginx/1.7.12'
Nginx/1.7.12	vpn.ac	471315.0	vpn.ac	2023-10-15 16:53:27.878633+00:00	2024-12-13 16:39:14.440453+00:00	lower(http_request.response_headers) contains 'nginx/1.7.12'