SchemaSpy Analysis of ESEC.ESECDBA - AnomaliesSentinel Reporting Views

Generated by SchemaSpy

Things that might not be 'quite right' about your schema:

• Columns whose name and type imply a relationship to another table's primary key:

  Child Column	Implied Parent Column
  ADV_MASTER.VULN_KB_ID	ADV_VULN_KB.VULN_KB_ID
  ASSET.CUST_ID	CUST.CUST_ID
  ASSET_HOSTNAME.CUST_ID	CUST.CUST_ID
  ASSET_HOSTNAME.PHYSICAL_ASSET_ID	PHYSICAL_ASSET.PHYSICAL_ASSET_ID
  ASSET_IP.CUST_ID	CUST.CUST_ID
  ASSET_LOC.CUST_ID	CUST.CUST_ID
  CORR_ACT_DEF.CORR_ACT_META_ID	CORR_ACT_META.CORR_ACT_META_ID
  ESEC_ARCHIVE_LOGS.TABLE_NAME	ESEC_PARTITION_CONFIG.TABLE_NAME
  ESEC_TEMP_PART_INFO.TABLE_NAME	ESEC_PARTITION_CONFIG.TABLE_NAME
  EVENTS.AGENT_ID	EVT_AGENT.AGENT_ID
  EVENTS.PRTCL_ID	EVT_PRTCL.PRTCL_ID
  EVENTS.TXNMY_ID	EVT_TXNMY.TXNMY_ID
  EVENTS_SUB.AGENT_ID	EVT_AGENT.AGENT_ID
  EVENTS_SUB.CUST_ID	CUST.CUST_ID
  EVENTS_SUB.PRTCL_ID	EVT_PRTCL.PRTCL_ID
  EVENTS_SUB.TXNMY_ID	EVT_TXNMY.TXNMY_ID
  EVT_AGENT.CUST_ID	CUST.CUST_ID
  EVT_ASSET.CUST_ID	CUST.CUST_ID
  EVT_DEST_EVT_NAME_SMRY_1.CUST_ID	CUST.CUST_ID
  EVT_DEST_EVT_NAME_SMRY_1.EVT_NAME_ID	EVT_NAME.EVT_NAME_ID
  EVT_DEST_EVT_NAME_SMRY_1.TXNMY_ID	EVT_TXNMY.TXNMY_ID
  EVT_DEST_EVT_NAME_SMRY_1.XDAS_TXNMY_ID	EVT_XDAS_TXNMY.XDAS_TXNMY_ID
  EVT_DEST_SMRY_1.AGENT_ID	EVT_AGENT.AGENT_ID
  EVT_DEST_SMRY_1.CUST_ID	CUST.CUST_ID
  EVT_DEST_SMRY_1.EVT_NAME_ID	EVT_NAME.EVT_NAME_ID
  EVT_DEST_SMRY_1.PRTCL_ID	EVT_PRTCL.PRTCL_ID
  EVT_DEST_SMRY_1.RSRC_ID	EVT_RSRC.RSRC_ID
  EVT_DEST_SMRY_1.TXNMY_ID	EVT_TXNMY.TXNMY_ID
  EVT_DEST_SMRY_1.XDAS_TXNMY_ID	EVT_XDAS_TXNMY.XDAS_TXNMY_ID
  EVT_DEST_TXNMY_SMRY_1.CUST_ID	CUST.CUST_ID
  EVT_DEST_TXNMY_SMRY_1.TXNMY_ID	EVT_TXNMY.TXNMY_ID
  EVT_DEST_TXNMY_SMRY_1.XDAS_TXNMY_ID	EVT_XDAS_TXNMY.XDAS_TXNMY_ID
  EVT_PORT_SMRY_1.CUST_ID	CUST.CUST_ID
  EVT_RSRC.CUST_ID	CUST.CUST_ID
  EVT_SEV_SMRY_1.CUST_ID	CUST.CUST_ID
  EVT_SRC_SMRY_1.AGENT_ID	EVT_AGENT.AGENT_ID
  EVT_SRC_SMRY_1.CUST_ID	CUST.CUST_ID
  EVT_SRC_SMRY_1.EVT_NAME_ID	EVT_NAME.EVT_NAME_ID
  EVT_SRC_SMRY_1.PRTCL_ID	EVT_PRTCL.PRTCL_ID
  EVT_SRC_SMRY_1.RSRC_ID	EVT_RSRC.RSRC_ID
  EVT_SRC_SMRY_1.TXNMY_ID	EVT_TXNMY.TXNMY_ID
  EVT_SRC_SMRY_1.XDAS_TXNMY_ID	EVT_XDAS_TXNMY.XDAS_TXNMY_ID
  EVT_USR.CUST_ID	CUST.CUST_ID
  EVT_USR.USR_ID	USERS.USR_ID
  INCIDENTS_ASSETS.ASSET_ID	ASSET.ASSET_ID
  INCIDENTS_ASSETS.INC_ID	INCIDENTS.INC_ID
  INCIDENTS_EVENTS.INC_ID	INCIDENTS.INC_ID
  INCIDENTS_VULN.INC_ID	INCIDENTS.INC_ID
  INCIDENTS_VULN.VULN_ID	VULN.VULN_ID
  INTEGRATOR_CONFIG.CONFIG_ID	MD_CONFIG.CONFIG_ID
  MD_CONFIG.USR_ID	USERS.USR_ID
  ORGANIZATION.CUST_ID	CUST.CUST_ID
  PERSON.CUST_ID	CUST.CUST_ID
  PHYSICAL_ASSET.CUST_ID	CUST.CUST_ID
  USR_ACCOUNT.CUST_ID	CUST.CUST_ID
  USR_IDENTITY.CUST_ID	CUST.CUST_ID

  56 instances of anomaly detected

• Tables without indexes:

  Table
  AUDIT_RECORD_NP
  ESEC_ARCHIVE_CONFIG
  ESEC_PARTITION_TEMP_INFO
  ESEC_SDM_LOCK
  ESEC_TEMP_PART_INFO
  EVENTS_SUB
  L_STAT
  TEMP_ADVISOR

  8 instances of anomaly detected

• Columns that are flagged as both 'nullable' and 'must be unique':

  Column
  CUST.CUST_NAME
  EVT_AGENT.AGENT
  EVT_AGENT.CUST_ID
  EVT_AGENT.DEVICE_CTGRY
  EVT_AGENT.PN
  EVT_AGENT.PORT
  EVT_AGENT.RN
  EVT_AGENT.SN
  EVT_AGENT.SRC_ID
  EVT_AGENT.ST
  EVT_PRTCL.PRTCL_NAME
  EVT_RSRC.CUST_ID
  EVT_RSRC.RSRC_NAME
  EVT_RSRC.SUBRSRC_NAME
  EVT_TXNMY.DEVICE_CTGRY
  EVT_TXNMY.TXNMY_LVL_1
  EVT_TXNMY.TXNMY_LVL_2
  EVT_TXNMY.TXNMY_LVL_3
  EVT_TXNMY.TXNMY_LVL_4
  EVT_USR.AUTHORITY
  EVT_USR.CUST_ID
  EVT_USR.USR_NAME
  OBJ_STORE.OBJ_NAME
  OBJ_STORE.OBJ_NAMESPACE
  PERSON.CUST_ID
  PERSON.FIRST_NAME
  PERSON.LAST_NAME
  PHYSICAL_ASSET.CUST_ID
  PHYSICAL_ASSET.HOST_NAME
  PHYSICAL_ASSET.IP_ADDR
  PRDT.PRDT_NAME
  PRDT.PRDT_VERSION

  32 instances of anomaly detected

• Tables that contain a single column:

  Table	Column
  ESEC_SDM_LOCK	LOCKED

  1 instance of anomaly detected

• Tables with incrementing column names, potentially indicating denormalization:

  Table
  ADV_VENDOR
  ADV_VENDOR_RPT_V
  ASSET_LOC
  ASSET_LOCATION_RPT_V
  ASSOCIATIONS
  ASSOCIATIONS_RPT_V
  CUST_HIERARCHY
  CUST_HIERARCHY_V
  ESEC_UUID_UUID_ASSOC
  ESEC_UUID_UUID_ASSOC_RPT_V
  EVENTS
  EVENTS_ALL_RPT_V
  EVENTS_ALL_RPT_V1
  EVENTS_ALL_V
  EVENTS_RPT_V
  EVENTS_RPT_V1
  EVENTS_RPT_V2
  EVENTS_RPT_V3
  EVENTS_SUB
  EVT_ASSET
  EVT_ASSET_RPT_V
  EVT_ASSET_RPT_V3
  EVT_TXNMY
  EVT_TXNMY_RPT_V
  HIST_EVENTS_RPT_V
  MSSP_ASSOCIATIONS
  MSSP_ASSOCIATIONS_V
  RPT_LABELS_RPT_V
  RPT_TRANSLATION

  29 instances of anomaly detected

• Columns whose default value is the word 'NULL' or 'null', but the SQL NULL value may have been intended:
  Anomaly not detected