SELECT DISTINCT(top_table._ident) FROM Prelude_Alert AS top_table LEFT JOIN Prelude_Classification AS t0 ON t0._message_ident=top_table._ident) WHERE t0.text = 'TCP Connection established'
Found 4362 qualifying records
DELETE FROM Prelude_Action WHERE _message_ident IN (list)
DELETE FROM Prelude_AdditionalData WHERE _message_ident IN (list)
DELETE FROM Prelude_Address WHERE _message_ident IN (list)
DELETE FROM Prelude_Alert WHERE _ident IN (list)
DELETE FROM Prelude_Alertident WHERE _message_ident IN (list)
DELETE FROM Prelude_Analyzer WHERE _message_ident IN (list)
DELETE FROM Prelude_AnalyzerTime WHERE _message_ident IN (list)
DELETE FROM Prelude_Assessment WHERE _message_ident IN (list)
DELETE FROM Prelude_Classification WHERE _message_ident IN (list)
DELETE FROM Prelude_Reference WHERE _message_ident IN (list)
DELETE FROM Prelude_Confidence WHERE _message_ident IN (list)
DELETE FROM Prelude_CorrelationAlert WHERE _message_ident IN (list)
DELETE FROM Prelude_CreateTime WHERE _message_ident IN (list)
DELETE FROM Prelude_DetectTime WHERE _message_ident IN (list)
DELETE FROM Prelude_File WHERE _message_ident IN (list)
DELETE FROM Prelude_FileAccess WHERE _message_ident IN (list)
DELETE FROM Prelude_FileAccess_Permission WHERE _message_ident IN (list)
DELETE FROM Prelude_Impact WHERE _message_ident IN (list)
DELETE FROM Prelude_Inode WHERE _message_ident IN (list)
DELETE FROM Prelude_Checksum WHERE _message_ident IN (list)
DELETE FROM Prelude_Linkage WHERE _message_ident IN (list)
DELETE FROM Prelude_Node WHERE _message_ident IN (list)
DELETE FROM Prelude_OverflowAlert WHERE _message_ident IN (list)
DELETE FROM Prelude_Process WHERE _message_ident IN (list)
DELETE FROM Prelude_ProcessArg WHERE _message_ident IN (list)
DELETE FROM Prelude_ProcessEnv WHERE _message_ident IN (list)
DELETE FROM Prelude_SnmpService WHERE _message_ident IN (list)
DELETE FROM Prelude_Service WHERE _message_ident IN (list)
DELETE FROM Prelude_Source WHERE _message_ident IN (list)
DELETE FROM Prelude_Target WHERE _message_ident IN (list)
DELETE FROM Prelude_ToolAlert WHERE _message_ident IN (list)
DELETE FROM Prelude_User WHERE _message_ident IN (list)
DELETE FROM Prelude_UserId WHERE _message_ident IN (list)
DELETE FROM Prelude_WebService WHERE _message_ident IN (list)
DELETE FROM Prelude_WebServiceArg WHERE _message_ident IN (list)
events: 4362; runtime: 165.779250145s; avg speed: 26 events/s