Table schema #
See Variables available in Cast for the information of each field.
field name | type | mode |
---|---|---|
test | BOOLEAN | NULLABLE |
act_id | INTEGER | NULLABLE |
act_name | STRING | NULLABLE |
cast_id | STRING | NULLABLE |
cast_name | STRING | NULLABLE |
artifact_id | INTEGER | NULLABLE |
device.id | STRING | NULLABLE |
device.name | STRING | NULLABLE |
device.mac_addr | STRING | NULLABLE |
device.hostname | STRING | NULLABLE |
device.target_triple | STRING | NULLABLE |
device.host_version | STRING | NULLABLE |
device.device_type | STRING | NULLABLE |
device.tags | STRING | REPEATED |
device.firmware_version | STRING | NULLABLE |
sequence_number | INTEGER | NULLABLE |
act_log_index | INTEGER | NULLABLE |
detected_at | INTEGER | NULLABLE |
triggered_at | INTEGER | NULLABLE |
data | JSON | NULLABLE |
To create a table in BigQuery, copy and use the following JSON.
[
{
"name": "test",
"type": "BOOLEAN"
},
{
"name": "act_id",
"type": "INTEGER"
},
{
"name": "act_name",
"type": "STRING"
},
{
"name": "cast_id",
"type": "STRING"
},
{
"name": "cast_name",
"type": "STRING"
},
{
"name": "artifact_id",
"type": "INTEGER"
},
{
"name": "device",
"type": "RECORD",
"fields": [
{
"name": "id",
"type": "STRING"
},
{
"name": "name",
"type": "STRING"
},
{
"name": "mac_addr",
"type": "STRING"
},
{
"name": "hostname",
"type": "STRING"
},
{
"name": "target_triple",
"type": "STRING"
},
{
"name": "host_version",
"type": "STRING"
},
{
"name": "device_type",
"type": "STRING"
},
{
"name": "tags",
"type": "STRING",
"mode": "REPEATED"
},
{
"name": "firmware_version",
"type": "STRING"
}
]
},
{
"name": "sequence_number",
"type": "INTEGER"
},
{
"name": "act_log_index",
"type": "INTEGER"
},
{
"name": "detected_at",
"type": "INTEGER"
},
{
"name": "triggered_at",
"type": "INTEGER"
},
{
"name": "data",
"type": "JSON"
}
]