Columns
| Column | Type | Size | Nulls | Auto | Default | Children | Parents | Comments |
|---|---|---|---|---|---|---|---|---|
| id | serial | 10 | √ | nextval('ssh_audit_log_id_seq'::regclass) |
|
|
{“what”:“Unique integer assigned by sequence; primary key for the log row.”,“why”:“Without it, rows cannot be uniquely referenced for updates or deletions.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:33.986399372+00:00”} |
|
| timestamp | timestamptz | 35,6 | null |
|
|
{“what”:“UTC timestamp with timezone when the SSH event occurred.”,“why”:“Without it, event ordering and time-based analysis are impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:34.000625124+00:00”} |
||
| event_type | text | 2147483647 | null |
|
|
{“what”:“Category of SSH event; exact values depend on application.”,“why”:“Without it, filtering or grouping by event category is impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:34.037633844+00:00”} |
||
| details | text | 2147483647 | √ | null |
|
|
{“what”:“Free-form text with additional context about the event.”,“why”:“Without it, context needed for debugging or investigation is lost.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:34.071604213+00:00”} |
|
| severity | text | 2147483647 | √ | 'info'::text |
|
|
{“what”:“Log severity level; default is ‘info’.”,“why”:“Without it, filtering by importance or alerting on critical events is impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:34.083092379+00:00”} |
Indexes
| Constraint Name | Type | Sort | Column(s) |
|---|---|---|---|
| ssh_audit_log_pkey | Primary key | Asc | id |
| idx_ssh_audit_ts | Performance | Asc | timestamp |