francoisa
03/07/2022, 10:02 AM{
"name": "fulldata",
"dataType": "STRING",
"maxLength": 2147483647
}
Table config extract
{
"columnName": "fulldata",
"transformFunction": "JSONFORMAT(meta)"
}
Mark Needham
Mark Needham
francoisa
03/07/2022, 11:11 AMMark Needham
francoisa
03/07/2022, 11:14 AMMark Needham
Mark Needham
francoisa
03/07/2022, 11:18 AMfrancoisa
03/07/2022, 11:50 AMMark Needham
francoisa
03/07/2022, 12:37 PMfrancoisa
03/07/2022, 12:50 PMKishore G
francoisa
03/07/2022, 3:08 PM{
"meta": {
"expectedValidator": [],
"relation": [
{
"id": "2",
"firstName": "Jules",
"lastName": "HUGHUE"
}
],
"expectedValidatorsForReject": [],
"isEnabled": false,
"version": "somevers",
"isLogged": true,
"language": "fr"
},
"data": {
"id": "4",
"type": "tiypes",
"attributes": {
"term": "2017-02",
"creationDate": "2017-02-01T00:00:00+0100",
"updateDate": "2017-02-01T00:00:00+0100",
"informationComments": "someRandomtext",
"closed": false,
"state": "validated",
"paid": true,
"advance": 0,
"actualExpenses": [],
"fixedExpenses": [
{
<List of elems>
}
]
}
}
}
francoisa
03/07/2022, 3:14 PMKishore G
Kishore G
select fulldata from T
you get all nulls?francoisa
03/07/2022, 3:38 PM{
"columnName": "meta_str",
"transformFunction": "JSONFORMAT(meta)"
},
{
"columnName": "relation",
"transformFunction": "JSONPATHARRAY(meta_str,'$.relation')"
}
Neha Pawar
francoisa
03/07/2022, 3:55 PMAaron Weiss
03/08/2022, 3:51 PMMark Needham
Aaron Weiss
03/08/2022, 4:17 PM{
"sourceEventId": "f95450d9-5cc3-4ec4-8fcb-2b09f60f1535",
"tenantName": "tenant6",
"unifiedEventId": "95eb09aa-3c27-4e0b-96f8-83cae515fe45",
"unifiedEventType": "IE",
"activityType": [
"Closed"
],
"browser": [
"Chrome"
],
"domain": [
"<http://tenant6.com|tenant6.com>"
],
"service": [
"Sites"
],
"insertedTimestamp": 1646690621502,
"source": [
"GW"
],
"updatedTimestamp": 1646690400000,
"user": "<mailto:Sam.Green@tenant6.com|Sam.Green@tenant6.com>",
"userName": "Sam.Green",
"category": null,
"country": "Benin",
"device": [
"Windows"
],
"documentType": "model/iges",
"host": [
"101.164.243.20"
],
"latitude": 62.33521305627646,
"location": [
"South Ozellaport (Trinidad and Tobago)"
],
"longitude": 8.5003176578741,
"objectType": [
"Account Feed"
],
"region": null,
"severityName": "Minor",
"statusName": "Invalid Password",
"clearedBy": null,
"clearedTimestamp": null,
"clearedAs": null,
"eventCount": null,
"ioiCode": null,
"incidentStartTime": 1646690621502,
"incidentEndTime": 1646690621502,
"threatScore": null,
"accountType": "External",
"accuracyRadius": null,
"actionTaken": null,
"activityCount": null,
"allDomains": [
"<http://tenant6.com|tenant6.com>"
],
"attachments": null,
"blockedApps": null,
"city": "New Bruno",
"contentChecks": null,
"createdTimestamp": 1646690400000,
"deviceManagementStatus": null,
"display": null,
"elasticaUser": "<mailto:Sam.Green@tenant6.com|Sam.Green@tenant6.com>",
"externalRecipients": [
{
"identifier": "<mailto:Donny@hotmail.com|Donny@hotmail.com>",
"ipAddress": "150.113.100.49",
"port": 7810,
"type": "TO",
"external": true
},
{
"identifier": "<mailto:Brandt@gmail.com|Brandt@gmail.com>",
"ipAddress": "154.45.234.165",
"port": 2473,
"type": "TO",
"external": true
}
],
"eventSource": null,
"failureType": null,
"file": [
{
"fileName": "BunnyLebowski.gif",
"fileSize": 724
},
{
"fileName": "TheDude.bmp",
"fileSize": 683
}
],
"fileName": [],
"fileSize": [],
"internalRecipients": [
{
"identifier": "<mailto:Donny@tenant6.com|Donny@tenant6.com>",
"ipAddress": "101.252.65.133",
"port": 3161,
"type": "TO",
"external": false
},
{
"identifier": "<mailto:TheBigLebowski@tenant6.com|TheBigLebowski@tenant6.com>",
"ipAddress": "57.10.204.15",
"port": 9823,
"type": "TO",
"external": false
}
],
"loginTime": 1646690400000,
"message": null,
"modifiedAt": 1646690621502,
"objectName": "Donny.csv",
"ownedBy": null,
"ownedInternally": true,
"parent": null,
"platform": null,
"policyAction": "ALERT",
"policyType": "NULL",
"policyViolated": null,
"reqSize": 183,
"reqUri": "<http://Jhogo.hotmail.com|Jhogo.hotmail.com>",
"recordedAt": 1646690621502,
"respCode": "200",
"respSize": 2,
"riskTypes": [
"PII, ContentIQ Violations"
],
"role": null,
"scope": null,
"sender": "<mailto:QarlKenning@gmail.com|QarlKenning@gmail.com>",
"sharedWith": null,
"subFeature": "Drive",
"subject": null,
"targetAccountType": "Internal",
"timestamp": 1646690400000,
"timeZone": "Asia/Novosibirsk",
"userAgent": null,
"userType": null,
"dateSent": null,
"monitorChannelType": null,
"protocolID": null,
"protocolType": null,
"senderIPAddress": null,
"senderPort": null,
"senderIdentifier": null,
"applicationReportName": null,
"clientUserId": null,
"dataType": null,
"expectActionSack": null,
"httpCookies": null,
"httpMethod": null,
"httpURL": null,
"httpUserAgent": null,
"networkDirection": null,
"userIsInternal": null,
"blockedStatus": null,
"blockedStatusSuperseded": null,
"detectionDate": null,
"matchCount": null,
"policyId": null,
"policyName": null,
"policyVersion": null,
"severityi18nKey": null,
"severityValue": null,
"statusValue": null,
"violationConditionId": null,
"violationConditionName": null,
"violationMatchCount": null,
"blockedBytes": null,
"blockedDownloadedBytes": null,
"blockedSessionCount": null,
"blockedUploadedBytes": null,
"brr": null,
"destination": null,
"downloadedBytes": null,
"duration": null,
"networkDevice": null,
"sessionCount": null,
"tags": [],
"uploadedBytes": null,
"userDevice": null,
"totalBytes": null,
"totalPackets": null,
"contentType": null,
"createdBy": null,
"eventService": null,
"exposed": null,
"exposureCountExternal": null,
"exposureCountInternal": null,
"exposedExternally": null,
"exposedPublicly": null,
"externalCollaborators": [],
"fieldName": null,
"format": null,
"instance": null,
"latency": null,
"internalCollaborators": [],
"newValue": null,
"objectURL": [],
"oldValue": null,
"operation": null,
"resource": null,
"resourceId": null,
"subscriptionId": null,
"subscriptionName": null,
"sysId": null,
"tableName": null,
"userCompany": "tenant6",
"userCountry": "Trinidad and Tobago",
"userDepartment": "Community-Services",
"userDomain": "<http://tenant6.com|tenant6.com>",
"userFirstName": "Sam",
"userIsActive": true,
"userIsAdmin": false,
"userLastName": "Green",
"userOrgUnit": "Individual & Family Services",
"userRawRiskScore": 6,
"userRiskRating": "Medium",
"userRiskScore": 80,
"userTitle": "Hospitality Orchestrator",
"userThreatScore": 10
}
Aaron Weiss
03/08/2022, 4:18 PMMark Needham
Aaron Weiss
03/08/2022, 4:18 PMMark Needham
Aaron Weiss
03/08/2022, 4:19 PMMark Needham
Aaron Weiss
03/08/2022, 4:25 PMMark Needham
"transformConfigs": [
{
"columnName": "externalRecipients_json",
"transformFunction": "JSONPATHARRAY(externalRecipients, '$.')"
},
{
"columnName": "file_json",
"transformFunction": "JSONPATHARRAY(file, '$.)"
},
{
"columnName": "internalRecipients_json",
"transformFunction": "JSONPATHARRAY(internalRecipients, '$.')"
}
]
Mark Needham
Mark Needham
Aaron Weiss
03/08/2022, 4:39 PMKishore G
Aaron Weiss
03/08/2022, 5:12 PMNeha Pawar
Neha Pawar
"ingestionConfig": {
"transformConfigs": [
{
"columnName": "externalRecipients_json",
"transformFunction": "jsonFormat(externalRecipients)"
},
{
"columnName": "file_json",
"transformFunction": "jsonFormat(file)"
},
{
"columnName": "internalRecipients_json",
"transformFunction": "jsonFormat(internalRecipients)"
}
]
}
Neha Pawar
{
"REALTIME": {
"tableName": "jsonIssue_REALTIME",
"tableType": "REALTIME",
"segmentsConfig": {
"schemaName": "jsonIssue",
"replication": "1",
"timeColumnName": "timestamp",
"allowNullTimeValue": false,
"replicasPerPartition": "1"
},
"tenants": {
"broker": "DefaultTenant",
"server": "DefaultTenant",
"tagOverrideConfig": {}
},
"tableIndexConfig": {
"invertedIndexColumns": [],
"noDictionaryColumns": [],
"rangeIndexColumns": [],
"rangeIndexVersion": 2,
"sortedColumn": [],
"bloomFilterColumns": [],
"loadMode": "MMAP",
"streamConfigs": {
"streamType": "kafka",
"stream.kafka.topic.name": "jsonFormatIssue2",
"stream.kafka.broker.list": "localhost:9092",
"stream.kafka.consumer.type": "lowlevel",
"stream.kafka.consumer.prop.auto.offset.reset": "smallest",
"stream.kafka.consumer.factory.class.name": "org.apache.pinot.plugin.stream.kafka20.KafkaConsumerFactory",
"stream.kafka.decoder.class.name": "org.apache.pinot.plugin.stream.kafka.KafkaJSONMessageDecoder",
"realtime.segment.flush.threshold.rows": "0",
"realtime.segment.flush.threshold.time": "24h",
"realtime.segment.flush.segment.size": "100M"
},
"onHeapDictionaryColumns": [],
"enableDefaultStarTree": false,
"aggregateMetrics": false,
"nullHandlingEnabled": false,
"autoGeneratedInvertedIndex": false,
"varLengthDictionaryColumns": [],
"enableDynamicStarTreeCreation": false,
"createInvertedIndexDuringSegmentGeneration": false
},
"metadata": {},
"quota": {},
"routing": {},
"query": {},
"ingestionConfig": {
"transformConfigs": [
{
"columnName": "fullData",
"transformFunction": "jsonFormat(meta)"
},
{
"columnName": "timestamp",
"transformFunction": "now()"
}
]
},
"isDimTable": false
}
}
schema:
{
"schemaName": "jsonIssue",
"dimensionFieldSpecs": [
{
"name": "fullData",
"dataType": "STRING"
}
],
"dateTimeFieldSpecs": [
{
"name": "timestamp",
"dataType": "LONG",
"format": "1:MILLISECONDS:EPOCH",
"granularity": "1:MILLISECONDS"
}
]
}
data row in kafka
{
"meta": {
"expectedValidator": [],
"relation": [
{
"id": "2",
"firstName": "Jules",
"lastName": "HUGHUE"
}
],
"expectedValidatorsForReject": [],
"isEnabled": false,
"version": "somevers",
"isLogged": true,
"language": "fr"
},
"data": {
"id": "4",
"type": "tiypes",
"attributes": {
"term": "2017-02",
"creationDate": "2017-02-01T00:00:00+0100",
"updateDate": "2017-02-01T00:00:00+0100",
"informationComments": "someRandomtext",
"closed": false,
"state": "validated",
"paid": true,
"advance": 0,
"actualExpenses": []
}
}
}
Aaron Weiss
03/08/2022, 8:31 PMNeha Pawar
Aaron Weiss
03/08/2022, 8:36 PMAaron Weiss
03/08/2022, 8:36 PMAaron Weiss
03/08/2022, 8:42 PMfrancoisa
03/08/2022, 8:46 PMKishore G
Neha Pawar
Kishore G