collapse_events


Description

{“what”:“A detected collapse incident with scoring, evidence, and remediation state.”,“why”:“Without it, collapse incidents and their remediation progress would be untracked, blocking incident response.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.802619134+00:00”}

Columns

Column Type Size Nulls Auto Default Children Parents Comments
id bigserial 19 √ nextval('collapse_events_id_seq'::regclass)
remediation_queue.id Implied Constraint R

{“what”:“Unique numeric identifier for the event; auto-incremented.”,“why”:“Without it, events cannot be uniquely referenced for updates or joins.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.856942260+00:00”}

source_service text 2147483647 null

{“what”:“Service identifier that emitted the collapse signal.”,“why”:“Without it, events from different services cannot be distinguished, making per-service analysis impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.871187003+00:00”}

model text 2147483647 √ null

{“what”:“Model identifier used for detection, if applicable.”,“why”:“Without it, events cannot be grouped by detection model, obscuring model-specific issues.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.887380371+00:00”}

item_type text 2147483647 null

{“what”:“Categorical type of the item that collapsed.”,“why”:“Without it, the scope of the collapse is unknown, preventing targeted remediation.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.915086923+00:00”}

item_ref text 2147483647 null

{“what”:“Reference identifier of the specific item that collapsed, such as a hostname or resource ID.”,“why”:“Without it, the exact affected resource cannot be identified for action.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.946215872+00:00”}

device text 2147483647 'dante'::text

{“what”:“Device or environment label; default ‘dante’.”,“why”:“Without it, events cannot be filtered by device, mixing environments.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.964666341+00:00”}

score float4 8,8 null

{“what”:“Numeric score (real) representing collapse confidence or severity.”,“why”:“Without it, events cannot be prioritized by severity.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:29.998871575+00:00”}

reasons jsonb 2147483647 √ null

{“what”:“JSON structure with contributing factors or evidence for the collapse.”,“why”:“Without it, the cause of the collapse is unknown, hindering diagnosis.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:30.011701037+00:00”}

sample text 2147483647 √ null

{“what”:“Textual sample or snippet of data that triggered the event.”,“why”:“Without it, the triggering data is unavailable for inspection.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:30.026610521+00:00”}

status text 2147483647 'pending'::text

{“what”:“Current remediation status; default ‘pending’.”,“why”:“Without it, the workflow state is unknown, blocking tracking of remediation.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:30.042548144+00:00”}

attempts int4 10 0

{“what”:“Number of remediation attempts made so far.”,“why”:“Without it, retry limits cannot be enforced.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:30.058446706+00:00”}

detected_at timestamptz 35,6 now()

{“what”:“Timestamp when the collapse was detected; timezone-aware.”,“why”:“Without it, event timing is unknown, preventing time-based analysis.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:30.084863684+00:00”}

remediated_at timestamptz 35,6 √ null

{“what”:“Timestamp when remediation completed, if any.”,“why”:“Without it, remediation duration cannot be calculated.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:17:30.097185502+00:00”}

Indexes

Constraint Name Type Sort Column(s)
collapse_events_pkey Primary key Asc id
collapse_events_source_service_item_ref_key Must be unique Asc/Asc source_service + item_ref
idx_collapse_detected Performance Asc detected_at
idx_collapse_status Performance Asc status

Relationships