surveilr_osquery_ms_distributed_result
| Column |
Type |
PK |
Required |
Default |
| surveilr_osquery_ms_distributed_result_id |
VARCHAR |
Yes |
Yes |
|
| query_id |
VARCHAR |
No |
Yes |
|
| node_key |
TEXT |
No |
Yes |
|
| results |
TEXT |
No |
Yes |
|
| status_code |
INTEGER |
No |
Yes |
|
| created_at |
TIMESTAMPTZ |
No |
No |
CURRENT_TIMESTAMP |
| created_by |
TEXT |
No |
No |
'UNKNOWN' |
| updated_at |
TIMESTAMPTZ |
No |
No |
|
| updated_by |
TEXT |
No |
No |
|
| deleted_at |
TIMESTAMPTZ |
No |
No |
|
| deleted_by |
TEXT |
No |
No |
|
| activity_log |
TEXT |
No |
No |
|
Foreign Keys
| Column Name |
Foreign Key |
| node_key |
node_key references surveilr_osquery_ms_node.node_key |
| query_id |
query_id references surveilr_osquery_ms_distributed_query.query_id |
Indexes
| Column Name |
Index Name |
| surveilr_osquery_ms_distributed_result_id |
sqlite_autoindex_surveilr_osquery_ms_distributed_result_1 |
SQL DDL
CREATE TABLE "surveilr_osquery_ms_distributed_result" (
"surveilr_osquery_ms_distributed_result_id" VARCHAR PRIMARY KEY NOT NULL,
"query_id" VARCHAR NOT NULL,
"node_key" TEXT NOT NULL,
"results" TEXT CHECK(json_valid(results)) NOT NULL,
"status_code" INTEGER NOT NULL,
"created_at" TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
"created_by" TEXT DEFAULT 'UNKNOWN',
"updated_at" TIMESTAMPTZ,
"updated_by" TEXT,
"deleted_at" TIMESTAMPTZ,
"deleted_by" TEXT,
"activity_log" TEXT,
FOREIGN KEY("query_id") REFERENCES "surveilr_osquery_ms_distributed_query"("query_id"),
FOREIGN KEY("node_key") REFERENCES "surveilr_osquery_ms_node"("node_key")
)