console_information_schema_view (view) Content

code_notebook_sql_cell_migratable_state transition_result TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_state&stats=yes /console/content/view/code_notebook_sql_cell_migratable_state.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_state" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All cells that are candidates for migration (latest only) SELECT c.*, -- All columns from the code_notebook_sql_cell_migratable view s.from_state, -- The state the cell transitioned from s.to_state, -- The state the cell transitioned to s.transition_reason, -- The reason for the state transition s.transition_result, -- The result of the state transition s.transitioned_at -- The timestamp of the state transition FROM code_notebook_sql_cell_migratable c JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id ORDER BY c.cell_name
code_notebook_sql_cell_migratable_state transitioned_at TIMESTAMPTZ /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_state&stats=yes /console/content/view/code_notebook_sql_cell_migratable_state.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_state" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All cells that are candidates for migration (latest only) SELECT c.*, -- All columns from the code_notebook_sql_cell_migratable view s.from_state, -- The state the cell transitioned from s.to_state, -- The state the cell transitioned to s.transition_reason, -- The reason for the state transition s.transition_result, -- The result of the state transition s.transitioned_at -- The timestamp of the state transition FROM code_notebook_sql_cell_migratable c JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed code_notebook_cell_id VARCHAR /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed notebook_kernel_id VARCHAR /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed notebook_name TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed cell_name TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed interpretable_code TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed interpretable_code_hash TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed description TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed cell_governance TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed arguments TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed activity_log TEXT /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed version_timestamp /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_sql_cell_migratable_not_executed is_idempotent /console/info-schema/view.sql?name=code_notebook_sql_cell_migratable_not_executed&stats=yes /console/content/view/code_notebook_sql_cell_migratable_not_executed.sql?stats=yes CREATE VIEW "code_notebook_sql_cell_migratable_not_executed" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- All latest migratable cells that have not yet been "executed" (based on the code_notebook_state table) SELECT c.* FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' WHERE s.code_notebook_cell_id IS NULL ORDER BY c.cell_name
code_notebook_migration_sql migration_sql /console/info-schema/view.sql?name=code_notebook_migration_sql&stats=yes /console/content/view/code_notebook_migration_sql.sql?stats=yes CREATE VIEW "code_notebook_migration_sql" AS -- code provenance: `RssdInitSqlNotebook.notebookBusinessLogicViews` (file:///home/baasit/www.surveilr.com/lib/std/lifecycle.sql.ts) -- Creates a dynamic migration script by concatenating all interpretable_code for cells that should be migrated. -- Excludes cells with names containing '_once_' if they have already been executed. -- Includes comments before each block and special comments for excluded cells. -- Wraps everything in a single transaction SELECT 'BEGIN TRANSACTION; '|| 'CREATE TEMP TABLE IF NOT EXISTS "session_state_ephemeral" ( "key" TEXT PRIMARY KEY NOT NULL, "value" TEXT NOT NULL ); ' || GROUP_CONCAT( CASE -- Case 1: Non-idempotent and already executed WHEN c.is_idempotent = FALSE AND s.code_notebook_cell_id IS NOT NULL THEN '-- ' || c.notebook_name || '.' || c.cell_name || ' not included because it is non-idempotent and was already executed on ' || s.transitioned_at || ' ' -- Case 2: Idempotent and not yet executed, idempotent and being reapplied, or non-idempotent and being run for the first time ELSE '-- ' || c.notebook_name || '.' || c.cell_name || ' ' || CASE -- First execution (non-idempotent or idempotent) WHEN s.code_notebook_cell_id IS NULL THEN '-- Executing for the first time. ' -- Reapplying execution (idempotent) ELSE '-- Reapplying execution. Last executed on ' || s.transitioned_at || ' ' END || c.interpretable_code || ' ' || 'INSERT INTO code_notebook_state (code_notebook_state_id, code_notebook_cell_id, from_state, to_state, transition_reason, created_at) ' || 'VALUES (' || '''' || c.code_notebook_cell_id || '__' || strftime('%Y%m%d%H%M%S', 'now') || '''' || ', ' || '''' || c.code_notebook_cell_id || '''' || ', ' || '''MIGRATION_CANDIDATE''' || ', ' || '''EXECUTED''' || ', ' || CASE WHEN s.code_notebook_cell_id IS NULL THEN '''Migration''' ELSE '''Reapplication''' END || ', ' || 'CURRENT_TIMESTAMP' || ')' || ' ' || 'ON CONFLICT(code_notebook_cell_id, from_state, to_state) DO UPDATE SET updated_at = CURRENT_TIMESTAMP, ' || 'transition_reason = ''Reapplied ' || datetime('now', 'localtime') || ''';' || ' ' END, ' ' ) || ' COMMIT;' AS migration_sql FROM code_notebook_sql_cell_migratable c LEFT JOIN code_notebook_state s ON c.code_notebook_cell_id = s.code_notebook_cell_id AND s.to_state = 'EXECUTED' ORDER BY c.cell_name
plm_graph graph_name VARCHAR /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph nature TEXT /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph uniform_resource_id VARCHAR /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph uri TEXT /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph ur_ingest_session_plm_acct_project_issue_id VARCHAR /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph issue_id TEXT /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph project_id VARCHAR /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph title TEXT /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
plm_graph body TEXT /console/info-schema/view.sql?name=plm_graph&stats=yes /console/content/view/plm_graph.sql?stats=yes CREATE VIEW "plm_graph" AS SELECT ure.graph_name, ure.nature, ur.uniform_resource_id, ur.uri, ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id, ur_ingest_plm.issue_id, ur_ingest_plm.ur_ingest_session_plm_acct_project_id as project_id, ur_ingest_plm.title, ur_ingest_plm.body FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_plm_acct_project_issue ur_ingest_plm ON ure.node_id = ur_ingest_plm.ur_ingest_session_plm_acct_project_issue_id WHERE ure.graph_name = 'plm'
imap_graph graph_name VARCHAR /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
imap_graph uniform_resource_id VARCHAR /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
imap_graph nature TEXT /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
imap_graph uri TEXT /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
imap_graph content BLOB /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
imap_graph ur_ingest_session_imap_acct_folder_message_id VARCHAR /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
imap_graph ingest_imap_acct_folder_id VARCHAR /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
imap_graph message_id TEXT /console/info-schema/view.sql?name=imap_graph&stats=yes /console/content/view/imap_graph.sql?stats=yes CREATE VIEW "imap_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur.content, ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id, ur_ingest_imap.ingest_imap_acct_folder_id, ur_ingest_imap.message_id FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_imap_acct_folder_message ur_ingest_imap ON ure.node_id = ur_ingest_imap.ur_ingest_session_imap_acct_folder_message_id WHERE ure.graph_name = 'imap'
filesystem_graph graph_name VARCHAR /console/info-schema/view.sql?name=filesystem_graph&stats=yes /console/content/view/filesystem_graph.sql?stats=yes CREATE VIEW "filesystem_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur_ingest_fs_path.ur_ingest_session_fs_path_id, ur_ingest_fs_path.root_path FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_fs_path ur_ingest_fs_path ON ure.node_id = ur_ingest_fs_path.ur_ingest_session_fs_path_id WHERE ure.graph_name = 'filesystem'
filesystem_graph uniform_resource_id VARCHAR /console/info-schema/view.sql?name=filesystem_graph&stats=yes /console/content/view/filesystem_graph.sql?stats=yes CREATE VIEW "filesystem_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur_ingest_fs_path.ur_ingest_session_fs_path_id, ur_ingest_fs_path.root_path FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_fs_path ur_ingest_fs_path ON ure.node_id = ur_ingest_fs_path.ur_ingest_session_fs_path_id WHERE ure.graph_name = 'filesystem'
filesystem_graph nature TEXT /console/info-schema/view.sql?name=filesystem_graph&stats=yes /console/content/view/filesystem_graph.sql?stats=yes CREATE VIEW "filesystem_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur_ingest_fs_path.ur_ingest_session_fs_path_id, ur_ingest_fs_path.root_path FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_fs_path ur_ingest_fs_path ON ure.node_id = ur_ingest_fs_path.ur_ingest_session_fs_path_id WHERE ure.graph_name = 'filesystem'
filesystem_graph uri TEXT /console/info-schema/view.sql?name=filesystem_graph&stats=yes /console/content/view/filesystem_graph.sql?stats=yes CREATE VIEW "filesystem_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur_ingest_fs_path.ur_ingest_session_fs_path_id, ur_ingest_fs_path.root_path FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_fs_path ur_ingest_fs_path ON ure.node_id = ur_ingest_fs_path.ur_ingest_session_fs_path_id WHERE ure.graph_name = 'filesystem'
filesystem_graph ur_ingest_session_fs_path_id VARCHAR /console/info-schema/view.sql?name=filesystem_graph&stats=yes /console/content/view/filesystem_graph.sql?stats=yes CREATE VIEW "filesystem_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur_ingest_fs_path.ur_ingest_session_fs_path_id, ur_ingest_fs_path.root_path FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_fs_path ur_ingest_fs_path ON ure.node_id = ur_ingest_fs_path.ur_ingest_session_fs_path_id WHERE ure.graph_name = 'filesystem'
filesystem_graph root_path TEXT /console/info-schema/view.sql?name=filesystem_graph&stats=yes /console/content/view/filesystem_graph.sql?stats=yes CREATE VIEW "filesystem_graph" AS SELECT ure.graph_name, ur.uniform_resource_id, ur.nature, ur.uri, ur_ingest_fs_path.ur_ingest_session_fs_path_id, ur_ingest_fs_path.root_path FROM uniform_resource_edge ure JOIN uniform_resource ur ON ure.uniform_resource_id = ur.uniform_resource_id JOIN ur_ingest_session_fs_path ur_ingest_fs_path ON ure.node_id = ur_ingest_fs_path.ur_ingest_session_fs_path_id WHERE ure.graph_name = 'filesystem'
surveilr_osquery_ms_node_detail surveilr_osquery_ms_node_id VARCHAR /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail node_key TEXT /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail host_identifier TEXT /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail osquery_version TEXT /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail last_seen TIMESTAMP /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail created_at TIMESTAMPTZ /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail updated_at NUM /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail ip_address BLOB /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail mac BLOB /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail boundary BLOB /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail added_to_surveilr_osquery_ms /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key
surveilr_osquery_ms_node_detail operating_system BLOB /console/info-schema/view.sql?name=surveilr_osquery_ms_node_detail&stats=yes /console/content/view/surveilr_osquery_ms_node_detail.sql?stats=yes CREATE VIEW surveilr_osquery_ms_node_detail AS SELECT n.surveilr_osquery_ms_node_id, n.node_key, n.host_identifier, n.osquery_version, n.last_seen, n.created_at, i.updated_at, i.address AS ip_address, i.mac, b.boundary, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.created_at)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.created_at)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.created_at)) / 86400) || ' days ago' END AS added_to_surveilr_osquery_ms, o.name AS operating_system, round(a.available_space, 2) || ' GB' AS available_space, CASE WHEN (strftime('%s', 'now') - strftime('%s', last_seen)) < 60 THEN 'Online' ELSE 'Offline' END AS node_status, CASE WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 60 THEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) || ' seconds ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 3600 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 60) || ' minutes ago' WHEN (strftime('%s', 'now') - strftime('%s', n.last_seen)) < 86400 THEN ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 3600) || ' hours ago' ELSE ((strftime('%s', 'now') - strftime('%s', n.last_seen)) / 86400) || ' days ago' END AS last_fetched, CASE WHEN CAST(u.days AS INTEGER) > 0 THEN 'about ' || u.days || ' day' || (CASE WHEN CAST(u.days AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.hours AS INTEGER) > 0 THEN 'about ' || u.hours || ' hour' || (CASE WHEN CAST(u.hours AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' WHEN CAST(u.minutes AS INTEGER) > 0 THEN 'about ' || u.minutes || ' minute' || (CASE WHEN CAST(u.minutes AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' ELSE 'about ' || u.seconds || ' second' || (CASE WHEN CAST(u.seconds AS INTEGER) = 1 THEN '' ELSE 's' END) || ' ago' END AS last_restarted, COALESCE(failed_policies.failed_count, 0) AS issues FROM surveilr_osquery_ms_node n LEFT JOIN surveilr_osquery_ms_node_available_space a ON n.node_key = a.node_key LEFT JOIN surveilr_osquery_ms_node_os_version o ON n.node_key = o.node_key LEFT JOIN surveilr_osquery_ms_node_uptime u ON n.node_key = u.node_key LEFT JOIN surveilr_osquery_ms_node_interface_address i ON n.node_key = i.node_key LEFT JOIN surveilr_osquery_ms_node_boundary b ON n.node_key = b.node_key LEFT JOIN ( SELECT node_key, COUNT(*) AS failed_count FROM surveilr_osquery_ms_node_executed_policy WHERE policy_result = 'Fail' GROUP BY node_key ) AS failed_policies ON n.node_key = failed_policies.node_key

Previous (Page 2 of 6) Next