surveilr_osquery_ms_carve
| Column |
Type |
PK |
Required |
Default |
| surveilr_osquery_ms_carve_id |
VARCHAR |
Yes |
Yes |
|
| node_key |
TEXT |
No |
Yes |
|
| session_id |
TEXT |
No |
Yes |
|
| carve_guid |
TEXT |
No |
Yes |
|
| carve_size |
INTEGER |
No |
Yes |
|
| block_count |
INTEGER |
No |
Yes |
|
| block_size |
INTEGER |
No |
Yes |
|
| received_blocks |
INTEGER |
No |
Yes |
0 |
| carve_path |
TEXT |
No |
No |
|
| status |
TEXT |
No |
Yes |
|
| start_time |
TIMESTAMPTZ |
No |
Yes |
|
| completion_time |
TIMESTAMPTZ |
No |
No |
|
| created_at |
TIMESTAMPTZ |
No |
No |
CURRENT_TIMESTAMP |
| created_by |
TEXT |
No |
No |
'UNKNOWN' |
| updated_at |
TIMESTAMPTZ |
No |
No |
|
| updated_by |
TEXT |
No |
No |
|
| deleted_at |
TIMESTAMPTZ |
No |
No |
|
| deleted_by |
TEXT |
No |
No |
|
| activity_log |
TEXT |
No |
No |
|
Foreign Keys
| Column Name |
Foreign Key |
| node_key |
node_key references surveilr_osquery_ms_node.node_key |
Indexes
| Column Name |
Index Name |
| session_id |
sqlite_autoindex_surveilr_osquery_ms_carve_2 |
| surveilr_osquery_ms_carve_id |
sqlite_autoindex_surveilr_osquery_ms_carve_1 |
SQL DDL
CREATE TABLE "surveilr_osquery_ms_carve" (
"surveilr_osquery_ms_carve_id" VARCHAR PRIMARY KEY NOT NULL,
"node_key" TEXT NOT NULL,
"session_id" TEXT /* UNIQUE COLUMN */ NOT NULL,
"carve_guid" TEXT NOT NULL,
"carve_size" INTEGER NOT NULL,
"block_count" INTEGER NOT NULL,
"block_size" INTEGER NOT NULL,
"received_blocks" INTEGER NOT NULL DEFAULT 0,
"carve_path" TEXT,
"status" TEXT NOT NULL,
"start_time" TIMESTAMPTZ NOT NULL,
"completion_time" TIMESTAMPTZ,
"created_at" TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
"created_by" TEXT DEFAULT 'UNKNOWN',
"updated_at" TIMESTAMPTZ,
"updated_by" TEXT,
"deleted_at" TIMESTAMPTZ,
"deleted_by" TEXT,
"activity_log" TEXT,
FOREIGN KEY("node_key") REFERENCES "surveilr_osquery_ms_node"("node_key"),
UNIQUE("session_id")
)