Complex~39min
The Slow Leak
API rate limit alerts trigger nightly between 3am and 5am. 40,000 requests. All authenticated. The sessions look legitimate. They are not.
Tables you'll query
api_logsusersrate_limit_events
What you'll learn
Window FunctionsCTEs (WITH clause)Aggregations & GROUP BYDate & Time Functions