CREATE VIEW tem_subfinder AS
SELECT
ur.uniform_resource_id,
t.tenant_id,
t.tenant_name,
ts.ur_ingest_session_id,
json_extract(ur.content, '$.input') AS domain,
json_extract(ur.content, '$.host') AS raw_records,
json_extract(ur.content, '$.source') AS source,
ur.created_at AS ingest_timestamp,
'subfinder' AS tool_name,
ur.uri
FROM uniform_resource ur
INNER JOIN tem_tenant t ON t.device_id = ur.device_id
INNER JOIN tem_session ts ON ur.device_id = ts.device_id
WHERE ur.uri LIKE '%subfinder%'