cv_audit_app event store

Hash-chained forensic event log — 4M+ events across ~50 sources

Custom SQL query

Tables

account_apps_snapshots

snapshot_at, store_hash, app_id, app_name

18 rows

account_user_snapshots

snapshot_at, store_hash, user_id, email, first_name, last_name, status, last_login_at, permissions_json, permissions_hash

52 rows

anomaly_baseline_actors

source, store, actor, first_seen, last_seen, event_count, learned_at

38,574 rows

anomaly_baseline_failed_logins

source, target_type, target_id, mean_per_hour, stddev, sample_size, learned_at

0 rows

anomaly_baseline_hourofday

source, actor, hour, event_count, total_count, learned_at

6,894 rows

anomaly_baseline_sequences

actor, prev_action, next_action, transition_count, actor_prev_total, probability, learned_at

4,031 rows

anomaly_baseline_volume

source, day_of_week, hour, mean_per_hour, stddev, sample_size, learned_at

1,398 rows

anomaly_cohort_assignment

actor, cohort_id, confidence, event_count, learned_at

1,016 rows

anomaly_cohort_baseline

cohort_id, feature, mean, stddev, member_count, learned_at

18 rows

chain_checkpoints

id, checkpoint_at, last_event_id, last_row_hash, signature, notes

27 rows

correlation_rules

id, name, event_a_source_glob, event_a_category, event_a_action_glob, event_b_source_glob, event_b_category, event_b_action_glob, same_actor, max_seconds, severity, summary_template, enabled, created_at

6 rows

coverage_refresh_state

k, v

2 rows

coverage_snapshot

source, captured, oldest, newest, most_recent_commit, refreshed_at, refresh_duration_ms

81 rows

coverage_snapshot_monthly

source, year_month, captured

2,394 rows

detection_signals

id, fired_at, rule_name, severity, store, summary, payload_json, related_event_ids, dedupe_key, acknowledged_at, acknowledged_by

5,154 rows

event_enrichments

event_id, enrichment_status, enrichment_attempts, enrichment_next_at, enrichment_started, enriched_at, enrichment_json, enrichment_error

Many rows

event_suppressions

event_id, reason, suppressed_by, suppressed_at

839 rows

events

id, occurred_at, received_at, store, source, category, action, scope, actor, target_type, target_id, bc_log_id, bc_hash, severity, payload_json, enriched_json, correlation_id, prev_hash, row_hash, target_id_derived

Many rows

ingest_log

id, received_at, endpoint, remote_ip, status, detail, body_size

Many rows

poll_cursors

store, source, last_id, last_run_at, last_status

2 rows

poll_heartbeats

id, heartbeat_at, source, status, detail, events_emitted

Many rows

refund_attributions

store, refund_id, order_id, refund_at, refund_amount, refund_tax, refund_reason, refund_item_count, bc_user_id, issuer_email, issuer_name, issuer_confidence, customer_email, gorgias_ticket_id, gorgias_ticket_subject, gorgias_assignee_email, gorgias_match_confidence, source_event_id, built_at

28,621 rows

retention_audit

id, ran_at, deleted_count, oldest_kept, notes

0 rows

security_snapshot

days_back, refreshed_at, fw_asn_json, source_summary_json

4 rows

source_truth

source, api_total, api_oldest, api_newest, measured_at, method, notes, event_source, event_category, live_event_source, live_event_category, mode, freshness_sla_minutes, heartbeat_source

81 rows

sqlite_sequence

name, seq

6 rows

storefront_script_snapshots

snapshot_at, store, page_url, script_id, kind, src, integrity, inline_hash, inline_preview, position

534 rows

stream_distinct_values

col, value, n, rank

197 rows

stream_source_counts

source, n, rank

91 rows

stream_stat_snapshot

k, v

3 rows

theme_snapshots

snapshot_at, store, theme_uuid, name, is_active, is_private

0 rows

volume_baselines

source, hour_of_week, median, mad, sample_size, computed_at

0 rows

webhook_registrations

store, scope, hook_id, is_active, destination, registered_at, last_seen_at, last_heartbeat_at

128 rows

... and 1 hidden table