Query Information

query_info

The query info object holds information related to data access within a datastore. To access, manipulate, delete, or retrieve data from a datastore, a query must be written using a specific syntax.

Attributes

CaptionNameTypeDescription
Total BytesbytesLong

The size of the data returned from the query.

DatadataJSON

The data returned from the query execution.

NamenameString

The query name for a saved or scheduled query.

Query Stringquery_stringString

A string representing the query code being run. For example: SELECT * FROM my_table

Query Timequery_timeTimestamp

The time when the query was run.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

Unique IDuidString

The unique identifier of the query.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

Query Information shown in context

Inbound Relationships

These objects and events reference Query Information in their attributes:

Outbound Relationships

Query Information references the following objects and events in its attributes:

This page describes ocsf-1.4.0