surveilr_osquery_ms_node

Column	Type	PK	Required	Default
surveilr_osquery_ms_node_id	TEXT	Yes	Yes
node_key	TEXT	No	Yes
host_identifier	TEXT	No	Yes
tls_cert_subject	TEXT	No	No
os_version	TEXT	No	Yes
platform	TEXT	No	Yes
last_seen	numeric	No	Yes
status	TEXT	No	Yes	'active'
osquery_version	TEXT	No	No
osquery_build_platform	TEXT	No	Yes
device_id	TEXT	No	Yes
behavior_id	TEXT	No	No
accelerate	INTEGER	No	Yes	60
created_at	TIMESTAMPTZ	No	No	CURRENT_TIMESTAMP
created_by	TEXT	No	No	'UNKNOWN'
updated_at	TIMESTAMPTZ	No	No
updated_by	TEXT	No	No
deleted_at	TIMESTAMPTZ	No	No
deleted_by	TEXT	No	No
activity_log	TEXT	No	No

Foreign Keys

Column Name	Foreign Key
behavior_id	behavior_id references behavior.behavior_id
device_id	device_id references device.device_id

Indexes

Column Name	Index Name
node_key	surveilr_osquery_ms_node_node_key_unique
host_identifier	surveilr_osquery_ms_node_host_identifier_os_version_unique
os_version	surveilr_osquery_ms_node_host_identifier_os_version_unique
node_key	idx_surveilr_osquery_ms_node__node_key
surveilr_osquery_ms_node_id	sqlite_autoindex_surveilr_osquery_ms_node_1

SQL DDL

CREATE TABLE `surveilr_osquery_ms_node` (
	`surveilr_osquery_ms_node_id` text PRIMARY KEY NOT NULL,
	`node_key` text NOT NULL,
	`host_identifier` text NOT NULL,
	`tls_cert_subject` text,
	`os_version` text NOT NULL,
	`platform` text NOT NULL,
	`last_seen` numeric NOT NULL,
	`status` text DEFAULT 'active' NOT NULL,
	`osquery_version` text,
	`osquery_build_platform` text NOT NULL,
	`device_id` text NOT NULL,
	`behavior_id` text,
	`accelerate` integer DEFAULT 60 NOT NULL,
	`created_at` TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
	`created_by` text DEFAULT 'UNKNOWN',
	`updated_at` TIMESTAMPTZ,
	`updated_by` text,
	`deleted_at` TIMESTAMPTZ,
	`deleted_by` text,
	`activity_log` text,
	FOREIGN KEY (`device_id`) REFERENCES `device`(`device_id`) ON UPDATE no action ON DELETE no action,
	FOREIGN KEY (`behavior_id`) REFERENCES `behavior`(`behavior_id`) ON UPDATE no action ON DELETE no action
)