SQL Schema
There are a total of 10 tables available for access via SQL.
| Name | Description |
|---|---|
|
flows_hourly |
Flow records at an hourly resolution, that is, information for each flowthe network traffic between network objects is stored hourly, on the hour. |
|
flows_daily |
Flow records at daily resolution, that is, information for each flow is stored daily, on the day at midnight. |
|
flows_monthly |
Flow records at monthly resolution, that is, information for each flow is stored monthly, on the 1st day of the month at midnight. |
|
urls_hourly |
URL records for each flow record that contain 1 or more urls at hourly resolution, that is, information for each url is stored hourly, on the hour. |
|
urls_daily |
URL records for each flow record that contain 1 or more urls at daily resolution, that is, information for each url is stored daily, on the day at midnight. |
|
urls_monthly |
URL records for each flow record that contain 1 or more urls at monthly resolution, that is, information for each url is stored monthly, on the 1st day of the month at midnight. |
|
app_ids_and_names |
Application records. The record contains a name, id and a flag to indicate if the application has been deleted. Deleted applications are used when labeling historical data. |
|
summary_applications |
Flow records summarized by application. Each record contains information gathered over a 5 minute period. |
|
summary_hosts_ex |
Flow records summarized by external host. Each record contains information gathered over a 5 minute period. |
|
summary_hosts_in |
Flow records summarized by internal host. Each record contains information gathered over a 5 minute period. |
See the following topics for more information about specific tables: