EventUID

Key used to uniquely identify a captured or imported event.

Yes

IDENTITYDEF

13

EventTimestamp

The time at which the event occurred.

Yes

TIMESTAMP

8

SequenceIDM

Part-key used to identify the owning sequence and also uniquely identify the event.

INTEGER

4

SequenceID

Part-key used to identify the owning sequence and also uniquely identify the event.

INTEGER

4

EventIndex

Part-key used to uniquely identify the event.

INTEGER

4

The index identifies the event order within its owning sequence.

EventMajorType

Identifies the 'major' event type (eg, email or web page)

INTEGER

4

Follow the hyperlink for details.

EventMinorType

Identifies the 'minor' event type (eg, email sent)

INTEGER

4

Follow the hyperlink for details.

EventSubType

Identifies the 'direction' of the event (eg, incoming or outgoing)

INTEGER

4

Follow the hyperlink for details.

AesMajorType

Part-key that identifies the source object (software package) that captured the sequence.

INTEGER

4

Follow the hyperlink for details

AesMinorType

Part-key that identifies the source object (software package) that captured the sequence.

INTEGER

4

Follow the hyperlink for details

AesSubType

Part-key that identifies the source object (software package) that captured the sequence.

INTEGER

4

Follow the hyperlink for details

EventText1

Event specific string identifying the event.

VARCHAR

255

Follow the hyperlink for details.

EventText2

Event specific string identifying the event.

LONGVARCHAR

Follow the hyperlink for details.

EventAttributes

Attributes of the event.

VARCHAR

255

Follow the hyperlink for details.

ExternalID

This attribute contains an external (non-CA DataMinder) unique ID of an event to enable matching with duplicates of the same event captured elsewhere.

VARCHAR

255

Duration

The length of time for which the event occurred.

INTEGER

4

Set to 0 if the event has no duration.

ExpiryTimestamp

Stores the time at which the event expires. Expired events are removed by the next scheduled database purge.

TIMESTAMP

8

IsPermanent

If this column has a non-zero (true) value, then the event will never be deleted by a scheduled database purge.

BIT

1

UpdateTimestamp

The time that event was last written to the DBMS.

TIMESTAMP

8

This will be different on the CMS and client.

PurgeState

Indicates whether the row can be purged if 'Purge On Replicate' is enabled. This column is ignored on a CMS.

INTEGER

4

Possible values:

0 - Cannot be purged

1 - Can be purged

GMTOffset

Specifies the difference (in minutes) between UTC time and the time zone in which an event's source machine resides.

INTEGER

4

The source machine is an import machine or the machine on which an event was captured.

Captured or imported events are time stamped in UTC time.

DSTOffset

Specifies the length (in minutes) of the daylight saving offset for the source machine's timezone.

INTEGER

4

For source machines in timezones where DST is used, the DSTOffset is always set to 60 irrespectve of whether the event was captured in summer or winter.

BlobType

Identifies the type of the blob (such as a file based blob).

INTEGER

4

Follow the hyperlink for details.

NULL if the event has no BLOB.

BlobLocation

The location of the blob data. The format of this string depends on the BlobType.

VARCHAR

255

NULL if the event has no BLOB.

BlobSize

The size of the blob (in bytes) before encryption/compression.

DECIMAL

13

NULL if the event has no BLOB.

BLOBPhysicalSize

The size of the blob (in bytes) after encryption/compression.

DECIMAL

13

NULL if the event has no BLOB.

QueryFlags

Denormalized column indicating if the event has associated Trigger and/or Audit Records

INTEGER

4

Possible values:

0 = None

1 = Trigger

2 = Issue

3 = Issue+Trigger

4 = Audit

5 = Audit+Trigger

6 = Audit+Issue

7 = Audit+Issue+Trigger