surveilr_osquery_ms_distributed_query
| Column |
Type |
PK |
Required |
Default |
| query_id |
VARCHAR |
Yes |
Yes |
|
| node_key |
TEXT |
No |
Yes |
|
| query_name |
TEXT |
No |
Yes |
|
| query_sql |
TEXT |
No |
Yes |
|
| discovery_query |
TEXT |
No |
No |
|
| status |
TEXT |
No |
Yes |
|
| created_at |
TIMESTAMPTZ |
No |
No |
CURRENT_TIMESTAMP |
| created_by |
TEXT |
No |
No |
'UNKNOWN' |
| updated_at |
TIMESTAMPTZ |
No |
No |
|
| updated_by |
TEXT |
No |
No |
|
| deleted_at |
TIMESTAMPTZ |
No |
No |
|
| deleted_by |
TEXT |
No |
No |
|
| activity_log |
TEXT |
No |
No |
|
Foreign Keys
| Column Name |
Foreign Key |
| node_key |
node_key references surveilr_osquery_ms_node.node_key |
Indexes
| Column Name |
Index Name |
| query_id |
sqlite_autoindex_surveilr_osquery_ms_distributed_query_1 |
SQL DDL
CREATE TABLE "surveilr_osquery_ms_distributed_query" (
"query_id" VARCHAR PRIMARY KEY NOT NULL,
"node_key" TEXT NOT NULL,
"query_name" TEXT NOT NULL,
"query_sql" TEXT NOT NULL,
"discovery_query" TEXT,
"status" TEXT NOT NULL,
"created_at" TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
"created_by" TEXT DEFAULT 'UNKNOWN',
"updated_at" TIMESTAMPTZ,
"updated_by" TEXT,
"deleted_at" TIMESTAMPTZ,
"deleted_by" TEXT,
"activity_log" TEXT,
FOREIGN KEY("node_key") REFERENCES "surveilr_osquery_ms_node"("node_key")
)