surveilr_osquery_ms_carve

Column	Type	PK	Required	Default
surveilr_osquery_ms_carve_id	TEXT	Yes	Yes
node_key	TEXT	No	Yes
session_id	TEXT	No	Yes
carve_guid	TEXT	No	Yes
carve_size	INTEGER	No	Yes
block_count	INTEGER	No	Yes
block_size	INTEGER	No	Yes
received_blocks	INTEGER	No	Yes	0
carve_path	TEXT	No	No
status	TEXT	No	Yes
start_time	numeric	No	Yes
completion_time	numeric	No	No
elaboration	TEXT	No	No
created_at	TIMESTAMPTZ	No	No	CURRENT_TIMESTAMP
created_by	TEXT	No	No	'UNKNOWN'
updated_at	TIMESTAMPTZ	No	No
updated_by	TEXT	No	No
deleted_at	TIMESTAMPTZ	No	No
deleted_by	TEXT	No	No
activity_log	TEXT	No	No

Foreign Keys

Column Name	Foreign Key
node_key	node_key references surveilr_osquery_ms_node.node_key

Indexes

Column Name	Index Name
carve_guid	surveilr_osquery_ms_carve_carve_guid_unique
session_id	surveilr_osquery_ms_carve_session_id_unique
surveilr_osquery_ms_carve_id	sqlite_autoindex_surveilr_osquery_ms_carve_1

SQL DDL

CREATE TABLE `surveilr_osquery_ms_carve` (
	`surveilr_osquery_ms_carve_id` text PRIMARY KEY NOT NULL,
	`node_key` text NOT NULL,
	`session_id` text NOT NULL,
	`carve_guid` text NOT NULL,
	`carve_size` integer NOT NULL,
	`block_count` integer NOT NULL,
	`block_size` integer NOT NULL,
	`received_blocks` integer DEFAULT 0 NOT NULL,
	`carve_path` text,
	`status` text NOT NULL,
	`start_time` numeric NOT NULL,
	`completion_time` numeric,
	`elaboration` text,
	`created_at` TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
	`created_by` text DEFAULT 'UNKNOWN',
	`updated_at` TIMESTAMPTZ,
	`updated_by` text,
	`deleted_at` TIMESTAMPTZ,
	`deleted_by` text,
	`activity_log` text,
	FOREIGN KEY (`node_key`) REFERENCES `surveilr_osquery_ms_node`(`node_key`) ON UPDATE no action ON DELETE no action
)