| -- detect multiple auths in a short window and | |
| -- send to lock account topic/microservice | |
| SELECT card, | |
| MAX(amount) as theamount, | |
| TUMBLE_END(eventTimestamp, interval '5' minute) as ts | |
| FROM payments | |
| WHERE lat IS NOT NULL | |
| AND lon IS NOT NULL | |
| GROUP BY card, TUMBLE(eventTimestamp, interval '5' minute) | |
| HAVING COUNT(*) > 4 -- >4==fraud |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment