{ "queries": [ { "id": "Q021", "sql": "SELECT _timestamp, pallet_id, sorter_model, facility_zone, throughput_rate FROM \"{stream}\" WHERE facility_zone IN ('ZONE-1', 'ZONE-2') AND throughput_rate > 300.0 ORDER BY throughput_rate DESC LIMIT 10", "category": "basic_select", "expected": { "columns": [ "pallet_id", "sorter_model", "facility_zone", "throughput_rate" ], "results": [ [ "PL-003", "SORT-M3", "ZONE-1", "840.0" ], [ "PL-007", "SORT-M3", "ZONE-1", "555.0" ], [ "PL-003", "SORT-M3", "ZONE-1", "320.0" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1199000000, "end_offset": 1363000000 } }, { "id": "Q022", "sql": "SELECT * FROM \"{stream}\" WHERE operation_mode='auto' AND load_factor > 30.0 LIMIT 10", "category": "basic_select", "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q022 warehouse event record 0 ACK batch batchIdList:Q022-0", "stdout", "PL-007", "72.8", "10.0", "555.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "200", "3.5", "120", "auto", "100", "3", "5", "22.0", "BS-2026-A1", "track TRK-ghi-jkl rerouted to ZONE-3", "ACK batch batchIdList:BT-003-2026 confirmed", "INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint", "E007", "@warehouse-Windows-sort-v1", "UP-E001", "ValidationException: item_count exceeds defect_limit bounds", "{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}", "[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]", "[\"cid-yza567\",\"status-error\"]", "MergeBatch", "10.12.0.103", "192.168.2.24", "prod", "low", "dashboard", "US-CENTRAL", "Go-http-client/2.0 conveyor-monitor", "UpdateBatch", "site-mum-09", "/api/v2/sorter/merge", "PUT", "200", "inbound", "pass", "task-a1b2c3", "ent-008-wh", "security", "overflow", "allow", "active", "merge", "/logs/warehouse/audit.log", "3200", "warehouse-south", "false", "v1.0.5", "BIN-E5", "1024", "temp-regulator", "rk-warehouse-006", "tok-wh-mno345pqr678", "warehouse-sync", "variant_b", "var1_pqr012", "200", "2100000", "300000", "0.12", "Mobile", "itemPage", "interaction", "vitalsInp", "https://shop.example.com/", "SSR", "Android 14", "File Inclusion", "POST /admin/config", "curl/7.88.1", "/health", "Acme Corp", "UK", "business", "[\"torbot_ua_mismatch\"]", "sess_003", "None", "true", "ORD-004", "None", "updateItems", "dc-east" ], [ "Q022 warehouse event record 3 ACK batch batchIdList:Q022-3", "stdout", "PL-002", "45.3", "58.0", "150.0", "SORT-A7", "LANE-A", "ZONE-4", "CC-GAMMA", "155", "1.5", "1000", "auto", "750", "1", "3", "35.7", "BS-2026-B2", "track TRK-mno-pqr alignment corrected", "ACK batch batchIdList:BT-006-2026 queued", "INFO: batch sync completed, url=http://warehouse.local/sync", "E010", "@warehouse-Linux-scan-v3", "UP-E004", "NullPointerException at ConveyorController.handle()", "{\"message\":{\"endpoint\":\"archiveLog\",\"status\":\"ok\"}}", "[\"{\\\"name\\\":\\\"precheck\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"execute\\\",\\\"startTime\\\":\\\"50\\\"}\", \"{\\\"name\\\":\\\"finalize\\\",\\\"startTime\\\":\\\"300\\\"}\"]", "[\"cid-def456\",\"status-pending\"]", "RetryScan", "10.12.1.201", "192.168.1.12", "prod", "medium", "scheduler", "US-EAST", "okhttp/4.12.0 (Android; sort-app)", "RerouteTrack", "site-lon-02", "/api/v2/sorter/retry", "POST", "204", "inbound", "denied", "task-j0k1l2", "ent-001-wh", "latency", "timeout", "block", "active", "sort", "/config/zone/ZONE-1.yaml", "15", "warehouse-west", "false", "v1.0.0", "BIN-H8", "8192", "conveyor-driver", "rk-warehouse-009", "tok-wh-efg123hij456", "warehouse-track", "variant_a", "var3_stu678", "500", "1200000", "250000", "0.03", "Computer", "searchPage", "interaction", "vitalsCls", "https://shop.example.com/item/1007", "CSR", "Mac OS X (iPhone)", "SQL Injection (Param)", "DELETE /api/session", "PostmanRuntime/7.35", "/swag/graphql", "CloudServe GmbH", "US", "business", "[\"scraping_pattern\",\"ip_hop\",\"rapid_login\"]", "sess_004", "suspicious", "false", "ORD-006", "None", "placeOrder", "dc-east" ], [ "Q023 warehouse event record 0 ACK batch batchIdList:Q023-0", "stderr", "PL-004", "45.3", "58.0", "150.0", "SORT-Q5", "LANE-C", "ZONE-2", "CC-ALPHA", "155", "1.5", "1000", "auto", "750", "1", "3", "35.7", "BS-2026-B2", "track TRK-mno-pqr alignment corrected", "ACK batch batchIdList:BT-006-2026 queued", "INFO: batch sync completed, url=http://warehouse.local/sync", "E010", "@warehouse-Linux-scan-v3", "None", "NullPointerException at ConveyorController.handle()", "{\"message\":{\"endpoint\":\"archiveLog\",\"status\":\"ok\"}}", "[\"{\\\"name\\\":\\\"precheck\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"execute\\\",\\\"startTime\\\":\\\"50\\\"}\", \"{\\\"name\\\":\\\"finalize\\\",\\\"startTime\\\":\\\"300\\\"}\"]", "[\"cid-def456\",\"status-pending\"]", "RetryScan", "10.12.1.201", "192.168.1.12", "prod", "medium", "scheduler", "US-EAST", "okhttp/4.12.0 (Android; sort-app)", "RerouteTrack", "site-lon-02", "None", "POST", "204", "inbound", "denied", "task-j0k1l2", "ent-001-wh", "latency", "timeout", "block", "active", "sort", "None", "15", "warehouse-west", "None", "v1.0.0", "BIN-H8", "8192", "conveyor-driver", "rk-warehouse-009", "tok-wh-efg123hij456", "warehouse-track", "None", "var3_stu678", "500", "1200000", "250000", "0.03", "Computer", "searchPage", "interaction", "vitalsCls", "None", "CSR", "Mac OS X (iPhone)", "SQL Injection (Param)", "DELETE /api/session", "PostmanRuntime/7.35", "/swag/graphql", "CloudServe GmbH", "US", "business", "[\"scraping_pattern\",\"ip_hop\",\"rapid_login\"]", "sess_004", "None", "false", "ORD-006", "None", "placeOrder", "dc-east" ], [ "Q023 warehouse event record 3 ACK batch batchIdList:Q023-3", "stdout", "PL-007", "99.0", "95.0", "610.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "60", "3.0", "168", "auto", "350", "1", "1", "28.9", "BS-2026-A1", "segment 42 scan completed with no defects", "ACK batch batchIdList:BT-009-2026 retried", "DEBUG: charge_remaining below threshold 15.0", "E003", "@warehouse-iOS-track-v3", "None", "ResourceExhaustedException: sorter_model SORT-M3 queue full", "{\"message\":{\"endpoint\":\"searchItems\",\"status\":\"ok\"}}", "[\"{\\\"name\\\":\\\"acquire\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"process\\\",\\\"startTime\\\":\\\"90\\\"}\", \"{\\\"name\\\":\\\"release\\\",\\\"startTime\\\":\\\"270\\\"}\"]", "[\"cid-mno345\",\"status-retrying\"]", "UpdateBatch", "10.12.1.204", "192.168.2.20", "dev", "high", "api", "EU-NORTH", "Mozilla/5.0 WarehouseScanner/1.0", "ArchiveLog", "site-sfo-05", "None", "GET", "500", "internal", "pass", "task-s9t0u1", "ent-004-wh", "latency", "jam", "block", "passive", "scan", "None", "230", "warehouse-central", "None", "v2.1.3", "BIN-A1", "32768", "track-router", "rk-warehouse-002", "tok-wh-wxy901zab234", "warehouse-sort", "None", "var1_yza234", "502", "3200000", "80000", "0.2", "Computer", "searchPage", "performanceMetric", "vitalsInp", "None", "CSR", "iOS 18.1", "CSRF Attempt", "GET /api/users?id=1", "Go-http-client/2.0", "/api/v2/search", "GlobalTech Inc", "IN", "business", "[\"credential_stuffing\",\"rapid_login\"]", "sess_001", "None", "true", "ORD-001", "None", "createAccount", "dc-west" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1259000000, "end_offset": 1423000000 } }, { "id": "Q023", "sql": "SELECT _timestamp, pallet_id, sorter_model, facility_zone, throughput_rate, load_factor, CASE WHEN load_factor >= 80.0 THEN 'critical' WHEN load_factor >= 50.0 THEN 'elevated' WHEN load_factor >= 20.0 THEN 'normal' ELSE 'idle' END AS load_tier, CASE WHEN cell_temp >= 30.0 THEN 'hot' WHEN cell_temp >= 22.0 THEN 'warm' ELSE 'cool' END AS temp_category FROM \"{stream}\" WHERE (facility_zone IN ('ZONE-1', 'ZONE-2', 'ZONE-3') AND operation_mode != 'manual') OR (charge_remaining < 50.0 AND scan_attempts >= 2) ORDER BY _timestamp DESC, load_factor DESC LIMIT 15", "category": "basic_select", "expected": { "columns": [ "pallet_id", "sorter_model", "facility_zone", "throughput_rate", "load_factor", "load_tier", "temp_category" ], "results": [ [ "PL-008", "SORT-Z9", "ZONE-2", "190.0", "88.1", "critical", "warm" ], [ "PL-007", "SORT-M3", "ZONE-1", "555.0", "72.8", "elevated", "warm" ], [ "PL-005", "SORT-X1", "ZONE-3", "555.0", "72.8", "elevated", "warm" ], [ "PL-004", "SORT-Q5", "ZONE-2", "290.0", "55.2", "elevated", "cool" ], [ "PL-003", "SORT-M3", "ZONE-1", "840.0", "33.0", "normal", "hot" ], [ "PL-002", "SORT-A7", "ZONE-4", "725.0", "12.5", "idle", "hot" ], [ "PL-008", "SORT-Z9", "ZONE-2", "725.0", "12.5", "idle", "hot" ], [ "PL-001", "SORT-X1", "ZONE-3", "610.0", "99.0", "critical", "warm" ], [ "PL-007", "SORT-M3", "ZONE-1", "610.0", "99.0", "critical", "warm" ], [ "PL-004", "SORT-Q5", "ZONE-2", "150.0", "45.3", "normal", "hot" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1319000000, "end_offset": 1483000000 } }, { "id": "Q024", "sql": "SELECT DISTINCT sorter_model, operation_mode, facility_zone, build_signature FROM \"{stream}\" WHERE defect_limit BETWEEN 1.0 AND 3.0 AND runtime_hours NOT IN (24, 48, 72) AND package_size >= 300 ORDER BY sorter_model ASC, operation_mode ASC", "category": "basic_select", "expected": { "columns": [ "sorter_model", "operation_mode", "facility_zone", "build_signature" ], "results": [ [ "SORT-A7", "auto", "ZONE-4", "BS-2026-B2" ], [ "SORT-M3", "manual", "ZONE-1", "BS-2026-C3" ], [ "SORT-M3", "manual", "ZONE-1", "BS-2026-A1" ], [ "SORT-Q5", "auto", "ZONE-2", "BS-2026-B2" ], [ "SORT-X1", "hybrid", "ZONE-3", "BS-2026-A1" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1379000000, "end_offset": 1543000000 } }, { "id": "Q026", "sql": "SELECT _timestamp, log, control_center, operation_mode, cell_temp, CASE WHEN cell_temp >= 35.0 AND operation_mode = 'auto' THEN 'OVERTEMP-AUTO' WHEN cell_temp >= 35.0 THEN 'OVERTEMP' WHEN cell_temp >= 28.0 AND charge_remaining < 30.0 THEN 'WARNING-LOWCHARGE' WHEN cell_temp >= 28.0 THEN 'WARM' ELSE 'NORMAL' END AS alert_status FROM \"{stream}\" WHERE (cell_temp >= 28.0) OR (charge_remaining < 30.0 AND operation_mode != 'hybrid') ORDER BY cell_temp DESC, charge_remaining ASC LIMIT 20", "category": "basic_select", "expected": { "columns": [ "log", "control_center", "operation_mode", "cell_temp", "alert_status" ], "results": [ [ "Q027 warehouse event record 3 ACK batch batchIdList:Q027-3", "CC-DELTA", "manual", "40.0", "OVERTEMP" ], [ "Q028 warehouse event record 0 ACK batch batchIdList:Q028-0", "CC-BETA", "manual", "40.0", "OVERTEMP" ], [ "Q025 warehouse event record 4", "CC-GAMMA", "auto", "35.7", "OVERTEMP-AUTO" ], [ "Q026 warehouse event record 1", "CC-ALPHA", "auto", "35.7", "OVERTEMP-AUTO" ], [ "Q027 warehouse event record 2", "CC-GAMMA", "auto", "32.5", "WARNING-LOWCHARGE" ], [ "Q026 warehouse event record 0 ACK batch batchIdList:Q026-0", "CC-DELTA", "manual", "30.1", "WARM" ], [ "Q026 warehouse event record 4", "CC-DELTA", "auto", "28.9", "WARM" ], [ "Q027 warehouse event record 1", "CC-BETA", "hybrid", "28.9", "WARM" ], [ "Q028 warehouse event record 2", "CC-DELTA", "auto", "22.0", "NORMAL" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1499000000, "end_offset": 1663000000 } }, { "id": "Q027", "sql": "SELECT _timestamp, sorter_model, facility_zone, throughput_rate, load_factor, charge_remaining, ROUND(CAST(throughput_rate AS FLOAT) * (CAST(load_factor AS FLOAT) / 100.0) * (CAST(charge_remaining AS FLOAT) / 100.0), 2) AS effective_capacity FROM \"{stream}\" WHERE throughput_rate > 300.0 AND load_factor >= 30.0 AND facility_zone != 'ZONE-4' ORDER BY effective_capacity DESC, _timestamp ASC LIMIT 10", "category": "basic_select", "expected": { "columns": [ "sorter_model", "facility_zone", "throughput_rate", "load_factor", "charge_remaining", "effective_capacity" ], "results": [ [ "SORT-M3", "ZONE-1", "610.0", "99.0", "95.0", "573.7100219726562" ], [ "SORT-X1", "ZONE-3", "610.0", "99.0", "95.0", "573.7100219726562" ], [ "SORT-X1", "ZONE-3", "900.0", "94.6", "42.5", "361.8500061035156" ], [ "SORT-M3", "ZONE-1", "900.0", "94.6", "42.5", "361.8500061035156" ], [ "SORT-M3", "ZONE-1", "840.0", "33.0", "33.3", "92.30999755859375" ], [ "SORT-X1", "ZONE-3", "840.0", "33.0", "33.3", "92.30999755859375" ], [ "SORT-M3", "ZONE-1", "555.0", "72.8", "10.0", "40.400001525878906" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1559000000, "end_offset": 1723000000 } }, { "id": "Q028", "sql": "SELECT pallet_id, sorter_model, conveyor_lane, operation_mode, runtime_hours, ROUND(runtime_hours / 24.0, 1) AS runtime_days, CASE WHEN runtime_hours >= 500 THEN 'heavy' WHEN runtime_hours >= 168 THEN 'moderate' ELSE 'light' END AS usage_class FROM \"{stream}\" WHERE runtime_hours IS NOT NULL AND (sorter_model LIKE 'SORT-X%' OR sorter_model LIKE 'SORT-Z%' OR (sorter_model = 'SORT-Q5' AND runtime_hours < 200)) ORDER BY runtime_days DESC", "category": "basic_select", "expected": { "columns": [ "pallet_id", "sorter_model", "conveyor_lane", "operation_mode", "runtime_hours", "runtime_days", "usage_class" ], "results": [ [ "PL-005", "SORT-X1", "LANE-D", "manual", "720", "30.0", "heavy" ], [ "PL-008", "SORT-Z9", "LANE-C", "manual", "500", "20.8", "heavy" ], [ "PL-001", "SORT-X1", "LANE-D", "hybrid", "168", "7.0", "moderate" ], [ "PL-001", "SORT-X1", "LANE-D", "hybrid", "90", "3.8", "light" ], [ "PL-008", "SORT-Z9", "LANE-C", "manual", "72", "3.0", "light" ], [ "PL-004", "SORT-Q5", "LANE-C", "auto", "48", "2.0", "light" ], [ "PL-005", "SORT-X1", "LANE-D", "manual", "24", "1.0", "light" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1619000000, "end_offset": 1783000000 } }, { "id": "Q029", "sql": "SELECT _timestamp, control_center, facility_zone, cell_temp, COALESCE(CAST(conveyor_segment AS VARCHAR), 'N/A') AS segment_label, COALESCE(CAST(defect_limit AS VARCHAR), '0.0') AS defect_str FROM \"{stream}\" WHERE facility_zone IN (SELECT DISTINCT facility_zone FROM \"{stream}\" WHERE cell_temp > 25.0) ORDER BY cell_temp DESC LIMIT 15", "category": "basic_select", "expected": { "columns": [ "control_center", "facility_zone", "cell_temp", "segment_label", "defect_str" ], "results": [ [ "CC-BETA", "ZONE-3", "40.0", "3", "1.2" ], [ "CC-DELTA", "ZONE-1", "40.0", "3", "1.2" ], [ "CC-ALPHA", "ZONE-2", "35.7", "3", "1.5" ], [ "CC-ALPHA", "ZONE-2", "32.5", "2", "0.8" ], [ "CC-GAMMA", "ZONE-4", "32.5", "2", "0.8" ], [ "CC-BETA", "ZONE-3", "30.1", "2", "1.0" ], [ "CC-DELTA", "ZONE-1", "30.1", "2", "1.0" ], [ "CC-BETA", "ZONE-3", "28.9", "1", "3.0" ], [ "CC-GAMMA", "ZONE-4", "26.3", "1", "0.5" ], [ "CC-GAMMA", "ZONE-4", "24.8", "5", "2.5" ], [ "CC-ALPHA", "ZONE-2", "24.8", "5", "2.5" ], [ "CC-BETA", "ZONE-3", "19.2", "4", "2.0" ], [ "CC-DELTA", "ZONE-1", "19.2", "4", "2.0" ], [ "CC-GAMMA", "ZONE-4", "18.5", "4", "2.8" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1679000000, "end_offset": 1843000000 } }, { "id": "Q030", "sql": "SELECT _timestamp, build_signature, operation_mode, item_count, package_size, ROUND(CAST(item_count AS FLOAT) * CAST(package_size AS FLOAT) / 1000.0, 2) AS total_weight_kg, CASE WHEN item_count * package_size >= 300000 THEN 'XL' WHEN item_count * package_size >= 100000 THEN 'LG' WHEN item_count * package_size >= 30000 THEN 'MD' ELSE 'SM' END AS shipment_tier FROM \"{stream}\" WHERE item_count > 0 AND package_size > 0 ORDER BY total_weight_kg DESC LIMIT 15", "category": "basic_select", "expected": { "columns": [ "build_signature", "operation_mode", "item_count", "package_size", "total_weight_kg", "shipment_tier" ], "results": [ [ "BS-2026-C3", "auto", "410", "1000", "410.0", "XL" ], [ "BS-2026-B2", "auto", "500", "600", "300.0", "XL" ], [ "BS-2026-B2", "auto", "500", "600", "300.0", "XL" ], [ "BS-2025-D4", "hybrid", "120", "1200", "144.0", "LG" ], [ "BS-2026-B2", "manual", "340", "250", "85.0", "MD" ], [ "BS-2026-B2", "auto", "340", "250", "85.0", "MD" ], [ "BS-2025-D4", "hybrid", "275", "200", "55.0", "MD" ], [ "BS-2025-D4", "manual", "275", "200", "55.0", "MD" ], [ "BS-2026-A1", "manual", "88", "500", "44.0", "MD" ], [ "BS-2026-C3", "manual", "50", "850", "42.5", "MD" ], [ "BS-2026-C3", "manual", "50", "850", "42.5", "MD" ], [ "BS-2026-A1", "hybrid", "60", "350", "21.0", "SM" ], [ "BS-2026-A1", "auto", "200", "100", "20.0", "SM" ], [ "BS-2026-A1", "hybrid", "200", "100", "20.0", "SM" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1739000000, "end_offset": 1903000000 } }, { "id": "Q031", "sql": "SELECT _timestamp, pallet_id, sorter_model, scan_attempts, retry_flag, CASE WHEN scan_attempts >= 3 THEN TRUE ELSE FALSE END AS retry_flag_derived FROM (SELECT _timestamp, pallet_id, sorter_model, scan_attempts, scan_attempts >= 3 AS retry_flag FROM \"{stream}\") sub WHERE retry_flag = TRUE ORDER BY scan_attempts DESC", "category": "basic_select", "expected": { "columns": [ "pallet_id", "sorter_model", "scan_attempts", "retry_flag", "retry_flag_derived" ], "results": [ [ "PL-003", "SORT-M3", "5", "True", "True" ], [ "PL-003", "SORT-M3", "4", "True", "True" ], [ "PL-005", "SORT-X1", "4", "True", "True" ], [ "PL-007", "SORT-M3", "3", "True", "True" ], [ "PL-001", "SORT-X1", "3", "True", "True" ], [ "PL-008", "SORT-Z9", "3", "True", "True" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1799000000, "end_offset": 1963000000 } }, { "id": "Q032", "sql": "SELECT _timestamp, conveyor_lane, facility_zone, cell_temp, ambient_deviation FROM (SELECT _timestamp, conveyor_lane, facility_zone, cell_temp, ROUND(cell_temp - (SELECT AVG(cell_temp) FROM \"{stream}\" t2 WHERE t2.facility_zone = t1.facility_zone), 2) AS ambient_deviation FROM \"{stream}\" t1 WHERE cell_temp IS NOT NULL) derived WHERE ABS(ambient_deviation) > 3.0 ORDER BY ABS(ambient_deviation) DESC LIMIT 12", "category": "basic_select", "expected": { "columns": [ "conveyor_lane", "facility_zone", "cell_temp", "ambient_deviation" ], "results": [ [ "LANE-D", "ZONE-3", "40.0", "12.48" ], [ "LANE-D", "ZONE-3", "19.2", "-8.32" ], [ "LANE-B", "ZONE-1", "19.2", "-6.87" ], [ "LANE-C", "ZONE-2", "35.7", "5.88" ], [ "LANE-D", "ZONE-3", "22.0", "-5.52" ], [ "LANE-A", "ZONE-4", "26.3", "-5.2" ], [ "LANE-C", "ZONE-2", "24.8", "-5.02" ], [ "LANE-A", "ZONE-4", "35.7", "4.2" ], [ "LANE-B", "ZONE-1", "30.1", "4.03" ], [ "LANE-C", "ZONE-2", "26.3", "-3.52" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1859000000, "end_offset": 2023000000 } }, { "id": "Q033", "sql": "SELECT _timestamp, operation_mode, conveyor_lane, load_factor, charge_remaining, ROUND((load_factor + (100.0 - charge_remaining)) / 2.0, 2) AS stress_index, CASE WHEN load_factor > 70.0 AND charge_remaining < 30.0 THEN 'OVERLOADED' WHEN load_factor > 70.0 THEN 'HIGH_LOAD' WHEN charge_remaining < 30.0 THEN 'LOW_CHARGE' ELSE 'STABLE' END AS health_status FROM \"{stream}\" ORDER BY stress_index DESC, _timestamp ASC LIMIT 15", "category": "basic_select", "expected": { "columns": [ "operation_mode", "conveyor_lane", "load_factor", "charge_remaining", "stress_index", "health_status" ], "results": [ [ "auto", "LANE-A", "88.1", "25.0", "81.55", "OVERLOADED" ], [ "auto", "LANE-B", "72.8", "10.0", "81.4", "OVERLOADED" ], [ "hybrid", "LANE-D", "72.8", "10.0", "81.4", "OVERLOADED" ], [ "auto", "LANE-A", "12.5", "5.0", "53.75", "LOW_CHARGE" ], [ "auto", "LANE-C", "12.5", "5.0", "53.75", "LOW_CHARGE" ], [ "hybrid", "LANE-D", "99.0", "95.0", "52.0", "HIGH_LOAD" ], [ "manual", "LANE-B", "99.0", "95.0", "52.0", "HIGH_LOAD" ], [ "manual", "LANE-D", "33.0", "33.3", "49.85", "STABLE" ], [ "manual", "LANE-D", "67.9", "75.3", "46.3", "STABLE" ], [ "auto", "LANE-B", "67.9", "75.3", "46.3", "STABLE" ], [ "hybrid", "LANE-A", "55.2", "66.6", "44.3", "STABLE" ], [ "manual", "LANE-C", "55.2", "66.6", "44.3", "STABLE" ], [ "hybrid", "LANE-A", "45.3", "58.0", "43.65", "STABLE" ], [ "manual", "LANE-C", "21.4", "88.7", "16.35", "STABLE" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1919000000, "end_offset": 2083000000 } }, { "id": "Q034", "sql": "SELECT DISTINCT ON (facility_zone) facility_zone, _timestamp, sorter_model, throughput_rate, load_factor FROM \"{stream}\" WHERE throughput_rate IS NOT NULL ORDER BY facility_zone ASC, throughput_rate DESC", "category": "basic_select", "expected": { "columns": [ "facility_zone", "sorter_model", "throughput_rate", "load_factor" ], "results": [ [ "ZONE-1", "SORT-M3", "900.0", "94.6" ], [ "ZONE-2", "SORT-Q5", "725.0", "12.5" ], [ "ZONE-3", "SORT-X1", "900.0", "94.6" ], [ "ZONE-4", "SORT-A7", "725.0", "12.5" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 1979000000, "end_offset": 2143000000 } }, { "id": "Q035", "sql": "SELECT _timestamp, log, facility_zone, stream FROM \"{stream}\" WHERE stream = 'stdout' ORDER BY _timestamp DESC LIMIT 15", "category": "basic_select", "expected": { "columns": [ "log", "facility_zone", "stream" ], "results": [ [ "Q037 warehouse event record 1", "ZONE-1", "stdout" ], [ "Q036 warehouse event record 4", "ZONE-3", "stdout" ], [ "Q037 warehouse event record 0 ACK batch batchIdList:Q037-0", "ZONE-4", "stdout" ], [ "Q036 warehouse event record 2", "ZONE-1", "stdout" ], [ "Q036 warehouse event record 1", "ZONE-4", "stdout" ], [ "Q036 warehouse event record 0 ACK batch batchIdList:Q036-0", "ZONE-3", "stdout" ], [ "Q035 warehouse event record 3 ACK batch batchIdList:Q035-3", "ZONE-1", "stdout" ], [ "Q035 warehouse event record 2", "ZONE-4", "stdout" ], [ "Q035 warehouse event record 1", "ZONE-3", "stdout" ], [ "Q034 warehouse event record 4", "ZONE-1", "stdout" ] ], "results_mode": "rowsort" }, "time_offset": { "start_offset": 2039000000, "end_offset": 2203000000 } }, { "id": "Q169", "sql": "SELECT risk_rules_list, COUNT(*) AS cnt FROM \"{stream}\" WHERE risk_rules_list IS NOT NULL AND TRIM(CAST(risk_rules_list AS VARCHAR)) <> '' AND page_slug = 'itemPage' GROUP BY risk_rules_list ORDER BY cnt DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 10079000000, "end_offset": 10243000000 }, "expected": { "columns": [ "risk_rules_list", "cnt" ], "results": [ [ "[\"credential_stuffing\"]", "2" ], [ "[\"rate_limit_exceeded\",\"geo_anomaly\"]", "2" ], [ "[\"scraping_pattern\",\"high_freq\"]", "2" ], [ "[\"torbot_ua_mismatch\",\"cookie_reuse\"]", "2" ] ], "results_mode": "rowsort" } }, { "id": "Q178", "sql": "SELECT _timestamp, log, facility_zone, operation_mode,\n throughput_rate, load_factor, charge_remaining, cell_temp,\n item_count, defect_limit, package_size\nFROM \"{stream}\"\nWHERE (facility_zone = 'ZONE-1' OR facility_zone = 'ZONE-2')\n AND (operation_mode IN ('auto', 'manual') OR (operation_mode = 'hybrid' AND load_factor > 50.0))\n AND throughput_rate > 100.0\n AND charge_remaining IS NOT NULL\n AND ((cell_temp >= 20.0 AND cell_temp <= 35.0) OR operation_mode = 'manual')\n AND defect_limit < 3.0\nORDER BY _timestamp DESC, throughput_rate DESC\nLIMIT 15", "category": "basic_select", "time_offset": { "start_offset": 10619000000, "end_offset": 10783000000 }, "expected": { "columns": [ "log", "facility_zone", "operation_mode", "throughput_rate", "load_factor", "charge_remaining", "cell_temp", "item_count", "defect_limit", "package_size" ], "results": [ [ "Q179 warehouse event record 4", "ZONE-2", "auto", "480.0", "21.4", "88.7", "24.8", "275", "2.5", "200" ], [ "Q179 warehouse event record 3 ACK batch batchIdList:Q179-3", "ZONE-1", "manual", "320.0", "67.9", "75.3", "19.2", "410", "2.0", "1000" ], [ "Q178 warehouse event record 4", "ZONE-1", "auto", "900.0", "94.6", "42.5", "30.1", "88", "1.0", "500" ], [ "Q179 warehouse event record 0 ACK batch batchIdList:Q179-0", "ZONE-2", "manual", "190.0", "88.1", "25.0", "26.3", "340", "0.5", "250" ], [ "Q178 warehouse event record 0 ACK batch batchIdList:Q178-0", "ZONE-1", "manual", "840.0", "33.0", "33.3", "40.0", "50", "1.2", "850" ] ], "results_mode": "rowsort" } }, { "id": "Q179", "sql": "SELECT _timestamp, facility_zone, load_factor, throughput_rate,\n CASE\n WHEN load_factor >= 80.0 AND cell_temp >= 30.0 THEN 'CRITICAL'\n WHEN load_factor >= 50.0 AND cell_temp >= 25.0 THEN 'WARNING'\n WHEN load_factor >= 20.0 THEN 'NORMAL'\n WHEN charge_remaining < 20.0 THEN 'LOW_CHARGE'\n ELSE 'IDLE'\n END AS status_level,\n CASE\n WHEN throughput_rate >= 500.0 THEN 'HIGH'\n WHEN throughput_rate >= 200.0 THEN 'MEDIUM'\n ELSE 'LOW'\n END AS throughput_tier\nFROM \"{stream}\"\nWHERE facility_zone != 'ZONE-4'\nORDER BY load_factor DESC, _timestamp DESC\nLIMIT 20", "category": "basic_select", "time_offset": { "start_offset": 10679000000, "end_offset": 10843000000 }, "expected": { "columns": [ "facility_zone", "load_factor", "throughput_rate", "status_level", "throughput_tier" ], "results": [ [ "ZONE-1", "99.0", "610.0", "WARNING", "HIGH" ], [ "ZONE-3", "94.6", "900.0", "CRITICAL", "HIGH" ], [ "ZONE-1", "94.6", "900.0", "CRITICAL", "HIGH" ], [ "ZONE-2", "88.1", "190.0", "WARNING", "LOW" ], [ "ZONE-3", "67.9", "320.0", "NORMAL", "MEDIUM" ], [ "ZONE-1", "67.9", "320.0", "NORMAL", "MEDIUM" ], [ "ZONE-2", "55.2", "290.0", "NORMAL", "MEDIUM" ], [ "ZONE-1", "33.0", "840.0", "NORMAL", "HIGH" ], [ "ZONE-3", "33.0", "840.0", "NORMAL", "HIGH" ], [ "ZONE-2", "21.4", "480.0", "NORMAL", "MEDIUM" ], [ "ZONE-2", "12.5", "725.0", "LOW_CHARGE", "HIGH" ] ], "results_mode": "rowsort" } }, { "id": "Q557", "sql": "SELECT _timestamp, concat(action_category, ' - ', action_subcategory, ' - ', error_code, ' : ', exception_message) AS display_msg FROM \"{stream}\" WHERE org_name = 'warehouse-east'", "category": "basic_select", "time_offset": { "start_offset": 33359000000, "end_offset": 33433000000 }, "expected": { "columns": [ "display_msg" ], "results": [ [ "performanceMetric - vitalsCls - E004 : SecurityException: unauthorized access to control_center CC-ALPHA" ] ], "results_mode": "rowsort" } }, { "id": "Q558", "sql": "SELECT _timestamp, coalesce(page_url, page_slug) AS effective_page, coalesce(exception_message, error_code) AS issue_desc, concat(coalesce(endpoint_path, resource_path), '?via=', http_method) AS full_path FROM \"{stream}\" WHERE action_category = 'navigation'", "category": "basic_select", "time_offset": { "start_offset": 33419000000, "end_offset": 33493000000 }, "expected": { "columns": [ "effective_page", "issue_desc", "full_path" ], "results": [ [ "homePage", "StateTransitionException: operation_mode hybrid invalid state", "?via=DELETE" ], [ "https://shop.example.com/item/1005", "StateTransitionException: operation_mode hybrid invalid state", "/api/v1/health/check?via=DELETE" ] ], "results_mode": "rowsort" } }, { "id": "Q559", "sql": "SELECT * FROM \"{stream}\" WHERE exception_message LIKE '%Exception%' OR upstream_error_code LIKE '%UP-E00%' OR error_code LIKE '%E00%' OR event_detail LIKE '%fail%' OR log_message LIKE '%ERROR%'", "category": "basic_select", "time_offset": { "start_offset": 33479000000, "end_offset": 33553000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q558 warehouse event record 4", "stdout", "PL-003", "94.6", "42.5", "900.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "88", "1.0", "90", "manual", "500", "5", "2", "30.1", "BS-2026-A1", "segment 88 speed anomaly detected", "ACK batch batchIdList:BT-005-2026 processed", "POST /api/v2/sorter/scan 201 Created", "E009", "@warehouse-iOS-scan-v1", "UP-E003", "OverflowException: throughput_rate 999.0 exceeds max capacity", "{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}", "[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]", "[\"cid-abc123\",\"status-ok\"]", "ArchiveLog", "10.12.0.105", "192.168.1.11", "dev", "high", "api", "AP-CENTRAL", "axios/1.6.0 (Node.js; warehouse-ui)", "ScanPallet", "site-nyc-01", "/api/v1/archive/log", "GET", "201", "internal", "fail", "task-g7h8i9", "ent-010-wh", "capacity", "jam", "allow", "disabled", "scan", "/data/sorter/output.dat", "1900", "warehouse-east", "false", "v3.2.0", "BIN-G7", "4096", "sorter-engine", "rk-warehouse-008", "tok-wh-yza567bcd890", "warehouse-scan", "control", "sess_abc123", "200", "1100000", "180000", "0.25", "Mobile", "itemPage", "performanceMetric", "vitalsInp", "https://shop.example.com/item/1006", "SSR", "Android 13", "Evasion Technique", "PUT /api/cart/update", "Mozilla/5.0 Firefox/121", "/api/v1/data", "HostPro Inc", "BR", "hosting", "[\"credential_stuffing\"]", "sess_001", "None", "false", "ORD-003", "None", "updateItems", "dc-west" ], [ "Q559 warehouse event record 0 ACK batch batchIdList:Q559-0", "stderr", "PL-004", "88.1", "25.0", "190.0", "SORT-Q5", "LANE-C", "ZONE-2", "CC-ALPHA", "340", "0.5", "500", "auto", "250", "2", "1", "26.3", "BS-2026-B2", "batch MNO456 merged into pallet PL-005", "ACK batch batchIdList:BT-004-2026 validated", "GET /api/v1/warehouse/status 200 OK", "E008", "@warehouse-Android-scan-v2", "UP-E002", "StateTransitionException: operation_mode hybrid invalid state", "{\"message\":{\"endpoint\":\"mergeBatch\",\"status\":\"ok\"}}", "[\"{\\\"name\\\":\\\"boot\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"calibrate\\\",\\\"startTime\\\":\\\"100\\\"}\"]", "[\"cid-bcd890\",\"status-ok\"]", "CheckThreshold", "10.12.0.104", "192.168.1.10", "staging", "critical", "cli", "EU-CENTRAL", "PostmanRuntime/7.35.0", "DeleteRecord", "site-tor-10", "/api/v1/health/check", "DELETE", "200", "outbound", "pass", "task-d4e5f6", "ent-009-wh", "error", "mismatch", "block", "passive", "track", "/logs/warehouse/app.log", "78", "warehouse-central", "true", "v2.0.8", "BIN-F6", "2048", "charge-checker", "rk-warehouse-007", "tok-wh-stu901vwx234", "warehouse-sort", "variant_c", "var2_mno345", "200", "3400000", "120000", "0.08", "Computer", "homePage", "navigation", "vitalsLcp", "https://shop.example.com/item/1005", "CSR", "iOS 17.4", "Desync Attack", "GET /api/products", "python-requests/2.31", "/ip/10.0.0.1", "NetGuard AS", "US", "business", "[\"cookie_reuse\",\"session_hijack\"]", "sess_002", "None", "false", "ORD-005", "Allowlisted", "verifyPayment", "dc-central" ], [ "Q559 warehouse event record 1", "stdout", "PL-005", "94.6", "42.5", "900.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "88", "1.0", "90", "manual", "500", "5", "2", "30.1", "BS-2026-A1", "segment 88 speed anomaly detected", "ACK batch batchIdList:BT-005-2026 processed", "POST /api/v2/sorter/scan 201 Created", "E009", "@warehouse-iOS-scan-v1", "UP-E003", "OverflowException: throughput_rate 999.0 exceeds max capacity", "{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}", "[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]", "[\"cid-abc123\",\"status-ok\"]", "ArchiveLog", "10.12.0.105", "192.168.1.11", "dev", "high", "api", "AP-CENTRAL", "axios/1.6.0 (Node.js; warehouse-ui)", "ScanPallet", "site-nyc-01", "/api/v1/archive/log", "GET", "201", "internal", "fail", "task-g7h8i9", "ent-010-wh", "capacity", "jam", "allow", "disabled", "scan", "/data/sorter/output.dat", "1900", "warehouse-east", "false", "v3.2.0", "BIN-G7", "4096", "sorter-engine", "rk-warehouse-008", "tok-wh-yza567bcd890", "warehouse-scan", "control", "sess_abc123", "200", "1100000", "180000", "0.25", "Mobile", "itemPage", "performanceMetric", "vitalsInp", "https://shop.example.com/item/1006", "SSR", "Android 13", "Evasion Technique", "PUT /api/cart/update", "Mozilla/5.0 Firefox/121", "/api/v1/data", "HostPro Inc", "BR", "hosting", "[\"credential_stuffing\"]", "sess_001", "None", "false", "ORD-003", "None", "updateItems", "dc-west" ], [ "Q559 warehouse event record 2", "stdout", "PL-006", "45.3", "58.0", "150.0", "SORT-A7", "LANE-A", "ZONE-4", "CC-GAMMA", "155", "1.5", "1000", "hybrid", "750", "1", "3", "35.7", "BS-2026-B2", "track TRK-mno-pqr alignment corrected", "ACK batch batchIdList:BT-006-2026 queued", "INFO: batch sync completed, url=http://warehouse.local/sync", "E010", "@warehouse-Linux-scan-v3", "None", "NullPointerException at ConveyorController.handle()", "{\"message\":{\"endpoint\":\"archiveLog\",\"status\":\"ok\"}}", "[\"{\\\"name\\\":\\\"precheck\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"execute\\\",\\\"startTime\\\":\\\"50\\\"}\", \"{\\\"name\\\":\\\"finalize\\\",\\\"startTime\\\":\\\"300\\\"}\"]", "[\"cid-def456\",\"status-pending\"]", "RetryScan", "10.12.1.201", "192.168.1.12", "prod", "medium", "scheduler", "US-EAST", "okhttp/4.12.0 (Android; sort-app)", "RerouteTrack", "site-lon-02", "None", "POST", "204", "inbound", "denied", "task-j0k1l2", "ent-001-wh", "latency", "timeout", "block", "active", "sort", "None", "15", "warehouse-west", "None", "v1.0.0", "BIN-H8", "8192", "conveyor-driver", "rk-warehouse-009", "tok-wh-efg123hij456", "warehouse-track", "None", "var3_stu678", "500", "1200000", "250000", "0.03", "Computer", "searchPage", "interaction", "vitalsCls", "None", "CSR", "Mac OS X (iPhone)", "SQL Injection (Param)", "DELETE /api/session", "PostmanRuntime/7.35", "/swag/graphql", "CloudServe GmbH", "US", "business", "[\"scraping_pattern\",\"ip_hop\",\"rapid_login\"]", "sess_004", "None", "false", "ORD-006", "None", "placeOrder", "dc-east" ], [ "Q559 warehouse event record 3 ACK batch batchIdList:Q559-3", "stdout", "PL-007", "67.9", "75.3", "320.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "410", "2.0", "24", "auto", "1000", "2", "4", "19.2", "BS-2026-C3", "batch DEF234 registered at loading dock", "ACK batch batchIdList:BT-007-2026 dispatched", "WARN: lane jam detected at conveyor_segment=3", "E001", "@warehouse-Windows-scan-v2", "UP-E005", "TimeoutException: lane LANE-A did not respond within 5000ms", "{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}", "[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]", "[\"cid-ghi789\",\"status-failed\"]", "SyncZone", "10.12.1.202", "192.168.1.13", "prod", "low", "dashboard", "US-WEST", "Alamofire/5.8.0 (iOS; scan-app)", "MergeBatch", "site-tok-03", "/api/v1/zone/sync", "PUT", "400", "inbound", "pass", "task-m3n4o5", "ent-002-wh", "error", "overflow", "allow", "passive", "merge", "/logs/warehouse/error.log", "12", "warehouse-north", "true", "v1.1.2", "BIN-I9", "16384", "zone-controller", "rk-warehouse-010", "tok-wh-klm789nop012", "warehouse-merge", "control", "ctl_vwx901", "404", "2500000", "70000", "0.15", "Tablet", "itemPage", "performanceMetric", "clickEvent", "https://shop.example.com/item/1001", "SSR", "Windows 11", "XSS Reflected (Header)", "GET /.env", "Mozilla/5.0 Safari/17.2", "/ip/192.168.1.1", "DataCenter EU", "JP", "business", "[\"rate_limit_exceeded\",\"geo_anomaly\"]", "sess_003", "None", "false", "ORD-007", "None", "verifyPayment", "dc-west" ], [ "Q559 warehouse event record 4", "stderr", "PL-008", "21.4", "88.7", "480.0", "SORT-Z9", "LANE-C", "ZONE-2", "CC-ALPHA", "275", "2.5", "72", "manual", "200", "3", "5", "24.8", "BS-2025-D4", "batch ABC123 processed successfully", "ACK batch batchIdList:BT-008-2026 archived", "ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry", "E002", "@warehouse-Android-track-v1", "None", "DataIntegrityException: pallet_id PL-002 checksum mismatch", "{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}", "[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]", "[\"cid-jkl012\",\"status-ok\"]", "SearchItems", "10.12.1.203", "192.168.1.14", "staging", "critical", "cli", "EU-WEST", "node-fetch/3.3.2 (tracking-service)", "CheckThreshold", "site-syd-04", "None", "DELETE", "404", "outbound", "fail", "task-p6q7r8", "ent-003-wh", "capacity", "mismatch", "allow", "active", "track", "None", "45", "warehouse-south", "None", "v2.0.0", "BIN-J0", "256", "scan-hub", "rk-warehouse-001", "tok-wh-qrs345tuv678", "warehouse-sync", "None", "sess_def456", "200", "1800000", "160000", "0.1", "Mobile", "itemPage", "navigation", "vitalsLcp", "None", "SSR", "Android 14", "Path Traversal", "POST /api/login {\"user\":\"admin\"}", "axios/1.6.0", "/admin/login", "Acme Corp", "US", "hosting", "[\"torbot_ua_mismatch\",\"cookie_reuse\"]", "sess_005", "None", "false", "ORD-008", "None", "updateCart", "dc-east" ], [ "Q560 warehouse event record 0 ACK batch batchIdList:Q560-0", "stdout", "PL-001", "67.9", "75.3", "320.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "410", "2.0", "24", "hybrid", "1000", "2", "4", "19.2", "BS-2026-C3", "batch DEF234 registered at loading dock", "ACK batch batchIdList:BT-007-2026 dispatched", "WARN: lane jam detected at conveyor_segment=3", "E001", "@warehouse-Windows-scan-v2", "UP-E005", "TimeoutException: lane LANE-A did not respond within 5000ms", "{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}", "[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]", "[\"cid-ghi789\",\"status-failed\"]", "SyncZone", "10.12.1.202", "192.168.1.13", "prod", "low", "dashboard", "US-WEST", "Alamofire/5.8.0 (iOS; scan-app)", "MergeBatch", "site-tok-03", "/api/v1/zone/sync", "PUT", "400", "inbound", "pass", "task-m3n4o5", "ent-002-wh", "error", "overflow", "allow", "passive", "merge", "/logs/warehouse/error.log", "12", "warehouse-north", "true", "v1.1.2", "BIN-I9", "16384", "zone-controller", "rk-warehouse-010", "tok-wh-klm789nop012", "warehouse-merge", "control", "ctl_vwx901", "404", "2500000", "70000", "0.15", "Tablet", "itemPage", "performanceMetric", "clickEvent", "https://shop.example.com/item/1001", "SSR", "Windows 11", "XSS Reflected (Header)", "GET /.env", "Mozilla/5.0 Safari/17.2", "/ip/192.168.1.1", "DataCenter EU", "JP", "business", "[\"rate_limit_exceeded\",\"geo_anomaly\"]", "sess_003", "None", "false", "ORD-007", "None", "verifyPayment", "dc-west" ] ], "results_mode": "rowsort" } }, { "id": "Q560", "sql": "SELECT visitor_session_id, action_category, exception_message, page_slug FROM \"{stream}\" WHERE org_name IN ('warehouse-east', 'warehouse-north', 'warehouse-central') AND build_version IS NOT NULL AND exception_message NOT LIKE '%Timeout%' AND exception_message NOT LIKE '%NullPointer%' AND error_code NOT IN ('E001', 'E002') AND device_type IN ('Mobile', 'Computer')", "category": "basic_select", "time_offset": { "start_offset": 33539000000, "end_offset": 33613000000 }, "expected": { "columns": [ "visitor_session_id", "action_category", "exception_message", "page_slug" ], "results": [ [ "sess_001", "performanceMetric", "ResourceExhaustedException: sorter_model SORT-M3 queue full", "searchPage" ], [ "sess_001", "performanceMetric", "SecurityException: unauthorized access to control_center CC-ALPHA", "cartPage" ], [ "sess_001", "performanceMetric", "SecurityException: unauthorized access to control_center CC-ALPHA", "cartPage" ] ], "results_mode": "rowsort" } }, { "id": "Q561", "sql": "SELECT * FROM \"{stream}\" WHERE action_category = 'navigation' AND page_slug IN ('itemPage', 'cartPage', 'checkoutPage', 'searchPage', 'itemPage') AND device_type IN ('Mobile', 'Computer')", "category": "basic_select", "time_offset": { "start_offset": 33599000000, "end_offset": 33673000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [], "results_mode": "rowsort" } }, { "id": "Q562", "sql": "SELECT _timestamp, (CASE WHEN char_length(exception_message) > 0 THEN exception_message ELSE error_code END) AS display_error, action_category, page_slug, device_type FROM \"{stream}\" WHERE action_category = 'performanceMetric'", "category": "basic_select", "time_offset": { "start_offset": 33659000000, "end_offset": 33733000000 }, "expected": { "columns": [ "display_error", "action_category", "page_slug", "device_type" ], "results": [ [ "OverflowException: throughput_rate 999.0 exceeds max capacity", "performanceMetric", "itemPage", "Mobile" ], [ "TimeoutException: lane LANE-A did not respond within 5000ms", "performanceMetric", "itemPage", "Tablet" ] ], "results_mode": "rowsort" } }, { "id": "Q563", "sql": "SELECT * FROM \"{stream}\" WHERE latency_ms BETWEEN 10 AND 100 AND action_category = 'performanceMetric' AND info_tag IS NULL AND bot_flag IS NULL", "category": "basic_select", "time_offset": { "start_offset": 33719000000, "end_offset": 33793000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q562 warehouse event record 4", "stdout", "PL-007", "67.9", "75.3", "320.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "410", "2.0", "24", "auto", "1000", "2", "4", "19.2", "BS-2026-C3", "batch DEF234 registered at loading dock", "ACK batch batchIdList:BT-007-2026 dispatched", "WARN: lane jam detected at conveyor_segment=3", "E001", "@warehouse-Windows-scan-v2", "None", "TimeoutException: lane LANE-A did not respond within 5000ms", "{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}", "[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]", "[\"cid-ghi789\",\"status-failed\"]", "SyncZone", "10.12.1.202", "192.168.1.13", "prod", "low", "dashboard", "US-WEST", "Alamofire/5.8.0 (iOS; scan-app)", "MergeBatch", "site-tok-03", "None", "PUT", "400", "inbound", "pass", "task-m3n4o5", "ent-002-wh", "error", "overflow", "allow", "passive", "merge", "None", "12", "warehouse-north", "None", "v1.1.2", "BIN-I9", "16384", "zone-controller", "rk-warehouse-010", "tok-wh-klm789nop012", "warehouse-merge", "None", "ctl_vwx901", "404", "2500000", "70000", "0.15", "Tablet", "itemPage", "performanceMetric", "clickEvent", "None", "SSR", "Windows 11", "XSS Reflected (Header)", "GET /.env", "Mozilla/5.0 Safari/17.2", "/ip/192.168.1.1", "DataCenter EU", "JP", "business", "[\"rate_limit_exceeded\",\"geo_anomaly\"]", "sess_003", "None", "false", "ORD-007", "None", "verifyPayment", "dc-west" ], [ "Q563 warehouse event record 1", "stdout", "PL-001", "67.9", "75.3", "320.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "410", "2.0", "24", "hybrid", "1000", "2", "4", "19.2", "BS-2026-C3", "batch DEF234 registered at loading dock", "ACK batch batchIdList:BT-007-2026 dispatched", "WARN: lane jam detected at conveyor_segment=3", "E001", "@warehouse-Windows-scan-v2", "UP-E005", "TimeoutException: lane LANE-A did not respond within 5000ms", "{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}", "[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]", "[\"cid-ghi789\",\"status-failed\"]", "SyncZone", "10.12.1.202", "192.168.1.13", "prod", "low", "dashboard", "US-WEST", "Alamofire/5.8.0 (iOS; scan-app)", "MergeBatch", "site-tok-03", "/api/v1/zone/sync", "PUT", "400", "inbound", "pass", "task-m3n4o5", "ent-002-wh", "error", "overflow", "allow", "passive", "merge", "/logs/warehouse/error.log", "12", "warehouse-north", "true", "v1.1.2", "BIN-I9", "16384", "zone-controller", "rk-warehouse-010", "tok-wh-klm789nop012", "warehouse-merge", "control", "ctl_vwx901", "404", "2500000", "70000", "0.15", "Tablet", "itemPage", "performanceMetric", "clickEvent", "https://shop.example.com/item/1001", "SSR", "Windows 11", "XSS Reflected (Header)", "GET /.env", "Mozilla/5.0 Safari/17.2", "/ip/192.168.1.1", "DataCenter EU", "JP", "business", "[\"rate_limit_exceeded\",\"geo_anomaly\"]", "sess_003", "None", "false", "ORD-007", "None", "verifyPayment", "dc-west" ] ], "results_mode": "rowsort" } }, { "id": "Q564", "sql": "SELECT concat(page_slug, ':', action_category, ':', action_subcategory) AS event_path, (CASE WHEN char_length(exception_message) > 0 THEN exception_message ELSE 'no_error' END) AS error_text, visitor_session_id, device_type FROM \"{stream}\" WHERE org_name = 'warehouse-east'", "category": "basic_select", "time_offset": { "start_offset": 33779000000, "end_offset": 33853000000 }, "expected": { "columns": [ "event_path", "error_text", "visitor_session_id", "device_type" ], "results": [ [ "cartPage:performanceMetric:vitalsCls", "SecurityException: unauthorized access to control_center CC-ALPHA", "sess_001", "Mobile" ], [ "cartPage:performanceMetric:vitalsCls", "SecurityException: unauthorized access to control_center CC-ALPHA", "sess_001", "Mobile" ] ], "results_mode": "rowsort" } }, { "id": "Q565", "sql": "SELECT _timestamp, coalesce(page_url, resource_path) AS page_ref, coalesce(exception_message, upstream_error_code, error_code, 'unknown') AS error_label FROM \"{stream}\" WHERE action_category = 'performanceMetric' AND (exception_message LIKE '%Exception%' OR upstream_error_code LIKE '%UP-E%')", "category": "basic_select", "time_offset": { "start_offset": 33839000000, "end_offset": 33913000000 }, "expected": { "columns": [ "page_ref", "error_label" ], "results": [ [ "https://shop.example.com/item/1004", "NetworkException: connection to batch sync failed" ], [ "None", "OverflowException: throughput_rate 999.0 exceeds max capacity" ], [ "None", "OverflowException: throughput_rate 999.0 exceeds max capacity" ] ], "results_mode": "rowsort" } }, { "id": "Q566", "sql": "SELECT * FROM \"{stream}\" WHERE org_name IN ('warehouse-north', 'warehouse-south', 'warehouse-central') AND build_version NOT IN ('v1.0.0', 'v1.1.2') AND device_type IN ('Mobile', 'Tablet', 'Computer') AND action_category = 'navigation' AND page_slug IN ('itemPage', 'homePage') AND visitor_session_id IS NOT NULL", "category": "basic_select", "time_offset": { "start_offset": 33899000000, "end_offset": 33973000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q566 warehouse event record 3 ACK batch batchIdList:Q566-3", "stdout", "PL-002", "21.4", "88.7", "480.0", "SORT-A7", "LANE-A", "ZONE-4", "CC-GAMMA", "275", "2.5", "72", "auto", "200", "3", "5", "24.8", "BS-2025-D4", "batch ABC123 processed successfully", "ACK batch batchIdList:BT-008-2026 archived", "ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry", "E002", "@warehouse-Android-track-v1", "UP-E006", "DataIntegrityException: pallet_id PL-002 checksum mismatch", "{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}", "[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]", "[\"cid-jkl012\",\"status-ok\"]", "SearchItems", "10.12.1.203", "192.168.1.14", "staging", "critical", "cli", "EU-WEST", "node-fetch/3.3.2 (tracking-service)", "CheckThreshold", "site-syd-04", "/api/v1/warehouse/search", "DELETE", "404", "outbound", "fail", "task-p6q7r8", "ent-003-wh", "capacity", "mismatch", "allow", "active", "track", "/data/sorter/input.dat", "45", "warehouse-south", "false", "v2.0.0", "BIN-J0", "256", "scan-hub", "rk-warehouse-001", "tok-wh-qrs345tuv678", "warehouse-sync", "variant_a", "sess_def456", "200", "1800000", "160000", "0.1", "Mobile", "itemPage", "navigation", "vitalsLcp", "https://shop.example.com/item/1002", "SSR", "Android 14", "Path Traversal", "POST /api/login {\"user\":\"admin\"}", "axios/1.6.0", "/admin/login", "Acme Corp", "US", "hosting", "[\"torbot_ua_mismatch\",\"cookie_reuse\"]", "sess_005", "None", "false", "ORD-008", "Blocklisted", "updateCart", "dc-east" ], [ "Q567 warehouse event record 0 ACK batch batchIdList:Q567-0", "stderr", "PL-004", "21.4", "88.7", "480.0", "SORT-Q5", "LANE-C", "ZONE-2", "CC-ALPHA", "275", "2.5", "72", "auto", "200", "3", "5", "24.8", "BS-2025-D4", "batch ABC123 processed successfully", "ACK batch batchIdList:BT-008-2026 archived", "ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry", "E002", "@warehouse-Android-track-v1", "UP-E006", "DataIntegrityException: pallet_id PL-002 checksum mismatch", "{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}", "[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]", "[\"cid-jkl012\",\"status-ok\"]", "SearchItems", "10.12.1.203", "192.168.1.14", "staging", "critical", "cli", "EU-WEST", "node-fetch/3.3.2 (tracking-service)", "CheckThreshold", "site-syd-04", "/api/v1/warehouse/search", "DELETE", "404", "outbound", "fail", "task-p6q7r8", "ent-003-wh", "capacity", "mismatch", "allow", "active", "track", "/data/sorter/input.dat", "45", "warehouse-south", "false", "v2.0.0", "BIN-J0", "256", "scan-hub", "rk-warehouse-001", "tok-wh-qrs345tuv678", "warehouse-sync", "variant_a", "sess_def456", "200", "1800000", "160000", "0.1", "Mobile", "itemPage", "navigation", "vitalsLcp", "https://shop.example.com/item/1002", "SSR", "Android 14", "Path Traversal", "POST /api/login {\"user\":\"admin\"}", "axios/1.6.0", "/admin/login", "Acme Corp", "US", "hosting", "[\"torbot_ua_mismatch\",\"cookie_reuse\"]", "sess_005", "None", "false", "ORD-008", "Blocklisted", "updateCart", "dc-east" ] ], "results_mode": "rowsort" } }, { "id": "Q567", "sql": "SELECT _timestamp, visitor_session_id, (CASE WHEN os_platform LIKE '%Android%' THEN 'Android' WHEN os_platform LIKE '%iOS%' OR os_platform LIKE '%iPhone%' THEN 'iOS' ELSE 'Other' END) AS platform, action_category, page_slug FROM \"{stream}\" WHERE org_name = 'warehouse-east'", "category": "basic_select", "time_offset": { "start_offset": 33959000000, "end_offset": 34033000000 }, "expected": { "columns": [ "visitor_session_id", "platform", "action_category", "page_slug" ], "results": [ [ "sess_001", "Android", "performanceMetric", "cartPage" ] ], "results_mode": "rowsort" } }, { "id": "Q568", "sql": "SELECT _timestamp, exception_message, error_code, component_name FROM \"{stream}\" WHERE (exception_message LIKE '%NullPointer%' OR exception_message LIKE '%Timeout%' OR exception_message LIKE '%ResourceExhausted%') AND page_slug IN ('itemPage', 'cartPage', 'checkoutPage', 'searchPage') AND org_name IN ('warehouse-east', 'warehouse-central')", "category": "basic_select", "time_offset": { "start_offset": 34019000000, "end_offset": 34093000000 }, "expected": { "columns": [ "exception_message", "error_code", "component_name" ], "results": [], "results_mode": "rowsort" } }, { "id": "Q569", "sql": "SELECT _timestamp, visitor_session_id, action_category, page_slug, exception_message FROM \"{stream}\" WHERE org_name = 'warehouse-east' AND action_category = 'performanceMetric' ORDER BY _timestamp DESC LIMIT 20", "category": "basic_select", "time_offset": { "start_offset": 34079000000, "end_offset": 34153000000 }, "expected": { "columns": [ "visitor_session_id", "action_category", "page_slug", "exception_message" ], "results": [ [ "sess_001", "performanceMetric", "itemPage", "OverflowException: throughput_rate 999.0 exceeds max capacity" ], [ "sess_001", "performanceMetric", "itemPage", "OverflowException: throughput_rate 999.0 exceeds max capacity" ] ], "results_mode": "rowsort" } }, { "id": "Q570", "sql": "SELECT _timestamp, coalesce(page_url, page_slug) AS source, action_category, action_subcategory, visitor_session_id FROM \"{stream}\" WHERE org_name IN ('warehouse-south') AND action_category = 'navigation'", "category": "basic_select", "time_offset": { "start_offset": 34139000000, "end_offset": 34213000000 }, "expected": { "columns": [ "source", "action_category", "action_subcategory", "visitor_session_id" ], "results": [ [ "itemPage", "navigation", "vitalsLcp", "sess_005" ], [ "itemPage", "navigation", "vitalsLcp", "sess_005" ] ], "results_mode": "rowsort" } }, { "id": "Q571", "sql": "SELECT * FROM \"{stream}\" WHERE exception_message LIKE '%Exception%' AND exception_message NOT LIKE '%Timeout%' AND exception_message NOT LIKE '%NullPointer%' AND error_code LIKE '%E00%' AND page_slug IN ('itemPage', 'cartPage')", "category": "basic_select", "time_offset": { "start_offset": 34199000000, "end_offset": 34273000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q570 warehouse event record 4", "stdout", "PL-007", "33.0", "33.3", "840.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "50", "1.2", "720", "auto", "850", "4", "3", "40.0", "BS-2026-C3", "batch XYZ789 timed out at checkpoint 3", "ACK batch batchIdList:BT-001-2026 received", "WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9", "E005", "@warehouse-iOS-sort-v2", "UP-E009", "ConfigurationException: missing facility_zone ZONE-3 override", "{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}", "[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]", "[\"cid-stu901\",\"status-warning\"]", "ScanPallet", "10.12.0.101", "192.168.2.22", "staging", "high", "dashboard", "AP-EAST", "Python-urllib/3.11 warehouse-client", "SyncZone", "site-dub-07", "/api/v2/sorter/scan", "GET", "401", "outbound", "fail", "task-y5z6a7", "ent-006-wh", "capacity", "overflow", "block", "active", "scan", "/data/sorter/temp.dat", "89", "warehouse-west", "false", "v3.0.1", "BIN-C3", "128", "pallet-mapper", "rk-warehouse-004", "tok-wh-abc123def456", "warehouse-track", "control", "sess_def456", "403", "1500000", "200000", "0.06", "Tablet", "itemPage", "performanceMetric", "pageView", "https://shop.example.com/cart", "CSR", "Mac OS X (iPhone)", "Command Injection", "GET /search?q=test", "Mozilla/5.0 Edge/120", "/swag/graphql", "FastHost Ltd", "US", "business", "[\"scraping_pattern\",\"high_freq\"]", "sess_001", "None", "false", "ORD-001", "None", "getInventory", "dc-central" ], [ "Q571 warehouse event record 0 ACK batch batchIdList:Q571-0", "stderr", "PL-008", "12.5", "5.0", "725.0", "SORT-Z9", "LANE-C", "ZONE-2", "CC-ALPHA", "500", "0.8", "360", "manual", "600", "2", "2", "32.5", "BS-2026-B2", "track TRK-abc-def diverted to LANE-B", "ACK batch batchIdList:BT-010-2026 completed", "INFO: throughput_rate=840.0 spike at facility_zone=ZONE-4", "E004", "@warehouse-Android-sort-v1", "None", "SecurityException: unauthorized access to control_center CC-ALPHA", "{\"message\":{\"endpoint\":\"updateBatch\",\"status\":\"pending\"}}", "[\"{\\\"name\\\":\\\"merge\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"split\\\",\\\"startTime\\\":\\\"120\\\"}\", \"{\\\"name\\\":\\\"route\\\",\\\"startTime\\\":\\\"240\\\"}\"]", "[\"cid-pqr678\",\"status-ok\"]", "DeleteRecord", "10.12.1.205", "192.168.2.21", "prod", "critical", "scheduler", "AP-SOUTH", "curl/7.88.1 (x86_64-pc-linux-gnu)", "RetryScan", "site-ber-06", "None", "POST", "503", "inbound", "pass", "task-v2w3x4", "ent-005-wh", "error", "timeout", "allow", "disabled", "sort", "None", "1450", "warehouse-east", "None", "v2.2.0", "BIN-B2", "65536", "batch-sync", "rk-warehouse-003", "tok-wh-cde567fgh890", "warehouse-scan", "None", "sess_abc123", "200", "900000", "150000", "0.3", "Mobile", "cartPage", "performanceMetric", "vitalsCls", "None", "SSR", "Android 12", "SSRF Probe", "POST /api/order {\"item\":123}", "Java/11.0.20", "/assets/js/app.js", "DigitalOcean LLC", "US", "education", "[\"session_hijack\",\"ip_hop\"]", "sess_001", "None", "false", "ORD-002", "None", "updateItems", "dc-east" ], [ "Q571 warehouse event record 1", "stdout", "PL-001", "33.0", "33.3", "840.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "50", "1.2", "720", "hybrid", "850", "4", "3", "40.0", "BS-2026-C3", "batch XYZ789 timed out at checkpoint 3", "ACK batch batchIdList:BT-001-2026 received", "WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9", "E005", "@warehouse-iOS-sort-v2", "UP-E009", "ConfigurationException: missing facility_zone ZONE-3 override", "{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}", "[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]", "[\"cid-stu901\",\"status-warning\"]", "ScanPallet", "10.12.0.101", "192.168.2.22", "staging", "high", "dashboard", "AP-EAST", "Python-urllib/3.11 warehouse-client", "SyncZone", "site-dub-07", "/api/v2/sorter/scan", "GET", "401", "outbound", "fail", "task-y5z6a7", "ent-006-wh", "capacity", "overflow", "block", "active", "scan", "/data/sorter/temp.dat", "89", "warehouse-west", "false", "v3.0.1", "BIN-C3", "128", "pallet-mapper", "rk-warehouse-004", "tok-wh-abc123def456", "warehouse-track", "control", "sess_def456", "403", "1500000", "200000", "0.06", "Tablet", "itemPage", "performanceMetric", "pageView", "https://shop.example.com/cart", "CSR", "Mac OS X (iPhone)", "Command Injection", "GET /search?q=test", "Mozilla/5.0 Edge/120", "/swag/graphql", "FastHost Ltd", "US", "business", "[\"scraping_pattern\",\"high_freq\"]", "sess_001", "None", "false", "ORD-001", "None", "getInventory", "dc-central" ], [ "Q571 warehouse event record 3 ACK batch batchIdList:Q571-3", "stdout", "PL-003", "72.8", "10.0", "555.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "200", "3.5", "120", "manual", "100", "3", "5", "22.0", "BS-2026-A1", "track TRK-ghi-jkl rerouted to ZONE-3", "ACK batch batchIdList:BT-003-2026 confirmed", "INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint", "E007", "@warehouse-Windows-sort-v1", "UP-E001", "ValidationException: item_count exceeds defect_limit bounds", "{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}", "[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]", "[\"cid-yza567\",\"status-error\"]", "MergeBatch", "10.12.0.103", "192.168.2.24", "prod", "low", "dashboard", "US-CENTRAL", "Go-http-client/2.0 conveyor-monitor", "UpdateBatch", "site-mum-09", "/api/v2/sorter/merge", "PUT", "200", "inbound", "pass", "task-a1b2c3", "ent-008-wh", "security", "overflow", "allow", "active", "merge", "/logs/warehouse/audit.log", "3200", "warehouse-south", "false", "v1.0.5", "BIN-E5", "1024", "temp-regulator", "rk-warehouse-006", "tok-wh-mno345pqr678", "warehouse-sync", "variant_b", "var1_pqr012", "200", "2100000", "300000", "0.12", "Mobile", "itemPage", "interaction", "vitalsInp", "https://shop.example.com/", "SSR", "Android 14", "File Inclusion", "POST /admin/config", "curl/7.88.1", "/health", "Acme Corp", "UK", "business", "[\"torbot_ua_mismatch\"]", "sess_003", "None", "true", "ORD-004", "None", "updateItems", "dc-east" ], [ "Q572 warehouse event record 0 ACK batch batchIdList:Q572-0", "stdout", "PL-005", "72.8", "10.0", "555.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "200", "3.5", "120", "manual", "100", "3", "5", "22.0", "BS-2026-A1", "track TRK-ghi-jkl rerouted to ZONE-3", "ACK batch batchIdList:BT-003-2026 confirmed", "INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint", "E007", "@warehouse-Windows-sort-v1", "UP-E001", "ValidationException: item_count exceeds defect_limit bounds", "{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}", "[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]", "[\"cid-yza567\",\"status-error\"]", "MergeBatch", "10.12.0.103", "192.168.2.24", "prod", "low", "dashboard", "US-CENTRAL", "Go-http-client/2.0 conveyor-monitor", "UpdateBatch", "site-mum-09", "/api/v2/sorter/merge", "PUT", "200", "inbound", "pass", "task-a1b2c3", "ent-008-wh", "security", "overflow", "allow", "active", "merge", "/logs/warehouse/audit.log", "3200", "warehouse-south", "false", "v1.0.5", "BIN-E5", "1024", "temp-regulator", "rk-warehouse-006", "tok-wh-mno345pqr678", "warehouse-sync", "variant_b", "var1_pqr012", "200", "2100000", "300000", "0.12", "Mobile", "itemPage", "interaction", "vitalsInp", "https://shop.example.com/", "SSR", "Android 14", "File Inclusion", "POST /admin/config", "curl/7.88.1", "/health", "Acme Corp", "UK", "business", "[\"torbot_ua_mismatch\"]", "sess_003", "None", "true", "ORD-004", "None", "updateItems", "dc-east" ] ], "results_mode": "rowsort" } }, { "id": "Q241", "sql": "SELECT _timestamp, visitor_session_id, action_category, error_code, exception_message, (CASE WHEN latency_ms > 500 THEN 'slow' WHEN latency_ms > 100 THEN 'medium' ELSE 'fast' END) AS speed_class FROM \"{stream}\" WHERE action_category = 'performanceMetric' AND latency_ms > 0", "category": "basic_select", "time_offset": { "start_offset": 14399000000, "end_offset": 14473000000 }, "expected": { "columns": [ "visitor_session_id", "action_category", "error_code", "exception_message", "speed_class" ], "results": [ [ "sess_001", "performanceMetric", "E005", "ConfigurationException: missing facility_zone ZONE-3 override", "fast" ], [ "sess_001", "performanceMetric", "E004", "SecurityException: unauthorized access to control_center CC-ALPHA", "slow" ], [ "sess_001", "performanceMetric", "E005", "ConfigurationException: missing facility_zone ZONE-3 override", "fast" ], [ "sess_002", "performanceMetric", "E006", "NetworkException: connection to batch sync failed", "slow" ] ], "results_mode": "rowsort" } }, { "id": "Q242", "sql": "SELECT * FROM \"{stream}\" WHERE bot_flag IS NULL AND info_tag IS NULL AND action_category = 'performanceMetric' AND org_name = 'warehouse-east'", "category": "basic_select", "time_offset": { "start_offset": 14459000000, "end_offset": 14533000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q242 warehouse event record 2", "stdout", "PL-005", "94.6", "42.5", "900.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "88", "1.0", "90", "manual", "500", "5", "2", "30.1", "BS-2026-A1", "segment 88 speed anomaly detected", "ACK batch batchIdList:BT-005-2026 processed", "POST /api/v2/sorter/scan 201 Created", "E009", "@warehouse-iOS-scan-v1", "UP-E003", "OverflowException: throughput_rate 999.0 exceeds max capacity", "{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}", "[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]", "[\"cid-abc123\",\"status-ok\"]", "ArchiveLog", "10.12.0.105", "192.168.1.11", "dev", "high", "api", "AP-CENTRAL", "axios/1.6.0 (Node.js; warehouse-ui)", "ScanPallet", "site-nyc-01", "/api/v1/archive/log", "GET", "201", "internal", "fail", "task-g7h8i9", "ent-010-wh", "capacity", "jam", "allow", "disabled", "scan", "/data/sorter/output.dat", "1900", "warehouse-east", "false", "v3.2.0", "BIN-G7", "4096", "sorter-engine", "rk-warehouse-008", "tok-wh-yza567bcd890", "warehouse-scan", "control", "sess_abc123", "200", "1100000", "180000", "0.25", "Mobile", "itemPage", "performanceMetric", "vitalsInp", "https://shop.example.com/item/1006", "SSR", "Android 13", "Evasion Technique", "PUT /api/cart/update", "Mozilla/5.0 Firefox/121", "/api/v1/data", "HostPro Inc", "BR", "hosting", "[\"credential_stuffing\"]", "sess_001", "None", "false", "ORD-003", "None", "updateItems", "dc-west" ] ], "results_mode": "rowsort" } }, { "id": "Q243", "sql": "SELECT _timestamp, visitor_session_id, os_platform, action_category, exception_message FROM \"{stream}\" WHERE re_match(os_platform, 'Android|iPhone|iOS') AND page_slug IN ('itemPage', 'cartPage') AND error_code IS NOT NULL", "category": "basic_select", "time_offset": { "start_offset": 14519000000, "end_offset": 14593000000 }, "expected": { "columns": [ "visitor_session_id", "os_platform", "action_category", "exception_message" ], "results": [ [ "sess_005", "Android 14", "navigation", "DataIntegrityException: pallet_id PL-002 checksum mismatch" ], [ "sess_001", "Android 12", "performanceMetric", "SecurityException: unauthorized access to control_center CC-ALPHA" ] ], "results_mode": "rowsort" } }, { "id": "Q244", "sql": "SELECT _timestamp, coalesce(exception_message, 'N/A') AS error_text, coalesce(endpoint_path, resource_path) AS called_path, action_category FROM \"{stream}\" WHERE org_name = 'warehouse-east' AND build_version IS NOT NULL AND action_category IN ('performanceMetric', 'interaction')", "category": "basic_select", "time_offset": { "start_offset": 14579000000, "end_offset": 14653000000 }, "expected": { "columns": [ "error_text", "called_path", "action_category" ], "results": [ [ "SecurityException: unauthorized access to control_center CC-ALPHA", "/api/v1/warehouse/delete", "performanceMetric" ], [ "SecurityException: unauthorized access to control_center CC-ALPHA", "/api/v1/warehouse/delete", "performanceMetric" ] ], "results_mode": "rowsort" } }, { "id": "Q245", "sql": "SELECT * FROM \"{stream}\" WHERE page_slug IN ('itemPage', 'searchPage', 'cartPage') AND action_category IN ('performanceMetric', 'navigation', 'interaction') AND os_platform IN ('Android 14', 'iOS 17.4') AND device_type IN ('Mobile', 'Tablet')", "category": "basic_select", "time_offset": { "start_offset": 14639000000, "end_offset": 14713000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q244 warehouse event record 4", "stdout", "PL-001", "72.8", "10.0", "555.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "200", "3.5", "120", "hybrid", "100", "3", "5", "22.0", "BS-2026-A1", "track TRK-ghi-jkl rerouted to ZONE-3", "ACK batch batchIdList:BT-003-2026 confirmed", "INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint", "E007", "@warehouse-Windows-sort-v1", "None", "ValidationException: item_count exceeds defect_limit bounds", "{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}", "[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]", "[\"cid-yza567\",\"status-error\"]", "MergeBatch", "10.12.0.103", "192.168.2.24", "prod", "low", "dashboard", "US-CENTRAL", "Go-http-client/2.0 conveyor-monitor", "UpdateBatch", "site-mum-09", "None", "PUT", "200", "inbound", "pass", "task-a1b2c3", "ent-008-wh", "security", "overflow", "allow", "active", "merge", "None", "3200", "warehouse-south", "None", "v1.0.5", "BIN-E5", "1024", "temp-regulator", "rk-warehouse-006", "tok-wh-mno345pqr678", "warehouse-sync", "None", "var1_pqr012", "200", "2100000", "300000", "0.12", "Mobile", "itemPage", "interaction", "vitalsInp", "None", "SSR", "Android 14", "File Inclusion", "POST /admin/config", "curl/7.88.1", "/health", "Acme Corp", "UK", "business", "[\"torbot_ua_mismatch\"]", "sess_003", "None", "true", "ORD-004", "None", "updateItems", "dc-east" ], [ "Q245 warehouse event record 1", "stdout", "PL-003", "72.8", "10.0", "555.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "200", "3.5", "120", "manual", "100", "3", "5", "22.0", "BS-2026-A1", "track TRK-ghi-jkl rerouted to ZONE-3", "ACK batch batchIdList:BT-003-2026 confirmed", "INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint", "E007", "@warehouse-Windows-sort-v1", "None", "ValidationException: item_count exceeds defect_limit bounds", "{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}", "[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]", "[\"cid-yza567\",\"status-error\"]", "MergeBatch", "10.12.0.103", "192.168.2.24", "prod", "low", "dashboard", "US-CENTRAL", "Go-http-client/2.0 conveyor-monitor", "UpdateBatch", "site-mum-09", "None", "PUT", "200", "inbound", "pass", "task-a1b2c3", "ent-008-wh", "security", "overflow", "allow", "active", "merge", "None", "3200", "warehouse-south", "None", "v1.0.5", "BIN-E5", "1024", "temp-regulator", "rk-warehouse-006", "tok-wh-mno345pqr678", "warehouse-sync", "None", "var1_pqr012", "200", "2100000", "300000", "0.12", "Mobile", "itemPage", "interaction", "vitalsInp", "None", "SSR", "Android 14", "File Inclusion", "POST /admin/config", "curl/7.88.1", "/health", "Acme Corp", "UK", "business", "[\"torbot_ua_mismatch\"]", "sess_003", "None", "true", "ORD-004", "None", "updateItems", "dc-east" ] ], "results_mode": "rowsort" } }, { "id": "Q246", "sql": "SELECT DISTINCT component_name, error_code FROM \"{stream}\" WHERE (exception_message LIKE '%Exception%' OR upstream_error_code LIKE '%UP-E%') AND org_name = 'warehouse-east'", "category": "basic_select", "time_offset": { "start_offset": 14699000000, "end_offset": 14773000000 }, "expected": { "columns": [ "component_name", "error_code" ], "results": [ [ "sorter-engine", "E009" ] ], "results_mode": "rowsort" } }, { "id": "Q247", "sql": "SELECT * FROM \"{stream}\" WHERE org_name NOT IN ('warehouse-south', 'warehouse-central') AND build_version NOT IN ('v1.0.0', 'v1.1.2') AND error_code NOT IN ('E002', 'E004') AND action_category NOT IN ('navigation')", "category": "basic_select", "time_offset": { "start_offset": 14759000000, "end_offset": 14833000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q247 warehouse event record 3 ACK batch batchIdList:Q247-3", "stdout", "PL-007", "33.0", "33.3", "840.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "50", "1.2", "720", "auto", "850", "4", "3", "40.0", "BS-2026-C3", "batch XYZ789 timed out at checkpoint 3", "ACK batch batchIdList:BT-001-2026 received", "WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9", "E005", "@warehouse-iOS-sort-v2", "UP-E009", "ConfigurationException: missing facility_zone ZONE-3 override", "{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}", "[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]", "[\"cid-stu901\",\"status-warning\"]", "ScanPallet", "10.12.0.101", "192.168.2.22", "staging", "high", "dashboard", "AP-EAST", "Python-urllib/3.11 warehouse-client", "SyncZone", "site-dub-07", "/api/v2/sorter/scan", "GET", "401", "outbound", "fail", "task-y5z6a7", "ent-006-wh", "capacity", "overflow", "block", "active", "scan", "/data/sorter/temp.dat", "89", "warehouse-west", "false", "v3.0.1", "BIN-C3", "128", "pallet-mapper", "rk-warehouse-004", "tok-wh-abc123def456", "warehouse-track", "control", "sess_def456", "403", "1500000", "200000", "0.06", "Tablet", "itemPage", "performanceMetric", "pageView", "https://shop.example.com/cart", "CSR", "Mac OS X (iPhone)", "Command Injection", "GET /search?q=test", "Mozilla/5.0 Edge/120", "/swag/graphql", "FastHost Ltd", "US", "business", "[\"scraping_pattern\",\"high_freq\"]", "sess_001", "None", "false", "ORD-001", "None", "getInventory", "dc-central" ], [ "Q247 warehouse event record 4", "stderr", "PL-008", "55.2", "66.6", "290.0", "SORT-Z9", "LANE-C", "ZONE-2", "CC-ALPHA", "120", "2.8", "48", "manual", "1200", "1", "4", "18.5", "BS-2025-D4", "segment 17 weight threshold exceeded", "ACK batch batchIdList:BT-002-2026 acknowledged", "ERROR: scan_attempts exhausted for pallet_id=PL-007", "E006", "@warehouse-Linux-sort-v3", "None", "NetworkException: connection to batch sync failed", "{\"message\":{\"endpoint\":\"scanPallet\",\"status\":\"ok\"}}", "[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"process\\\",\\\"startTime\\\":\\\"150\\\"}\"]", "[\"cid-vwx234\",\"status-ok\"]", "RerouteTrack", "10.12.0.102", "192.168.2.23", "dev", "medium", "cli", "SA-EAST", "Java/17.0.8 (OpenJDK; sorter-agent)", "SearchItems", "site-sin-08", "None", "POST", "403", "internal", "denied", "task-b8c9d0", "ent-007-wh", "latency", "timeout", "allow", "passive", "sort", "None", "567", "warehouse-north", "None", "v3.1.0", "BIN-D4", "512", "lane-monitor", "rk-warehouse-005", "tok-wh-ghi789jkl012", "warehouse-merge", "None", "ctl_xyz789", "200", "2800000", "95000", "0.05", "Computer", "checkoutPage", "performanceMetric", "vitalsLcp", "None", "SSR", "Android 14", "XSS Stored (Body)", "GET /favicon.ico", "Mozilla/5.0 Chrome/120", "/api/v1/users", "CloudServe GmbH", "DE", "hosting", "[\"rate_limit_exceeded\"]", "sess_002", "None", "false", "ORD-003", "None", "placeOrder", "dc-west" ], [ "Q248 warehouse event record 0 ACK batch batchIdList:Q248-0", "stdout", "PL-001", "33.0", "33.3", "840.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "50", "1.2", "720", "hybrid", "850", "4", "3", "40.0", "BS-2026-C3", "batch XYZ789 timed out at checkpoint 3", "ACK batch batchIdList:BT-001-2026 received", "WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9", "E005", "@warehouse-iOS-sort-v2", "None", "ConfigurationException: missing facility_zone ZONE-3 override", "{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}", "[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]", "[\"cid-stu901\",\"status-warning\"]", "ScanPallet", "10.12.0.101", "192.168.2.22", "staging", "high", "dashboard", "AP-EAST", "Python-urllib/3.11 warehouse-client", "SyncZone", "site-dub-07", "None", "GET", "401", "outbound", "fail", "task-y5z6a7", "ent-006-wh", "capacity", "overflow", "block", "active", "scan", "None", "89", "warehouse-west", "None", "v3.0.1", "BIN-C3", "128", "pallet-mapper", "rk-warehouse-004", "tok-wh-abc123def456", "warehouse-track", "None", "sess_def456", "403", "1500000", "200000", "0.06", "Tablet", "itemPage", "performanceMetric", "pageView", "None", "CSR", "Mac OS X (iPhone)", "Command Injection", "GET /search?q=test", "Mozilla/5.0 Edge/120", "/swag/graphql", "FastHost Ltd", "US", "business", "[\"scraping_pattern\",\"high_freq\"]", "sess_001", "None", "false", "ORD-001", "None", "getInventory", "dc-central" ] ], "results_mode": "rowsort" } }, { "id": "Q248", "sql": "SELECT _timestamp, action_category, action_subcategory, page_slug, latency_ms FROM \"{stream}\" WHERE action_category = 'performanceMetric' AND latency_ms > 0 ORDER BY latency_ms DESC, _timestamp ASC LIMIT 15", "category": "basic_select", "time_offset": { "start_offset": 14819000000, "end_offset": 14893000000 }, "expected": { "columns": [ "action_category", "action_subcategory", "page_slug", "latency_ms" ], "results": [ [ "performanceMetric", "vitalsInp", "itemPage", "1900" ], [ "performanceMetric", "vitalsLcp", "checkoutPage", "567" ], [ "performanceMetric", "vitalsLcp", "checkoutPage", "567" ], [ "performanceMetric", "pageView", "itemPage", "89" ] ], "results_mode": "rowsort" } }, { "id": "Q249", "sql": "SELECT * FROM \"{stream}\" WHERE component_name LIKE '%sorter%' OR component_name LIKE '%conveyor%' OR component_name LIKE '%zone%' OR component_name LIKE '%scan%'", "category": "basic_select", "time_offset": { "start_offset": 14879000000, "end_offset": 14953000000 }, "expected": { "columns": [ "log", "stream", "pallet_id", "load_factor", "charge_remaining", "throughput_rate", "sorter_model", "conveyor_lane", "facility_zone", "control_center", "item_count", "defect_limit", "runtime_hours", "operation_mode", "package_size", "scan_attempts", "conveyor_segment", "cell_temp", "build_signature", "event_detail", "ack_detail", "log_message", "error_code", "service_owner", "upstream_error_code", "exception_message", "request_payload", "phase_data", "db_info", "api_name", "node_ip", "source_ip", "tag_a", "tag_b", "query_source", "region_code", "client_agent", "operation_name", "site_name", "endpoint_path", "http_method", "response_code", "scan_category", "auth_result", "task_id", "entity_id", "alert_tags", "issue_type", "filter_result", "guard_mode", "record_type", "resource_path", "latency_ms", "org_name", "threat_flag", "build_version", "bin_code", "payload_size", "component_name", "route_key", "auth_token", "app_label", "variant_tag", "cookie_id", "status_code", "lcp_micros", "inp_micros", "cls_score", "device_type", "page_slug", "action_category", "action_subcategory", "page_url", "render_scope", "os_platform", "attack_name", "http_request", "user_agent_str", "uri_path", "geo_org", "geo_country", "geo_user_type", "risk_rules_list", "visitor_session_id", "bot_flag", "passthrough_flag", "order_ref", "info_tag", "graphql_operation", "datacenter" ], "results": [ [ "Q248 warehouse event record 4", "stdout", "PL-005", "94.6", "42.5", "900.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "88", "1.0", "90", "manual", "500", "5", "2", "30.1", "BS-2026-A1", "segment 88 speed anomaly detected", "ACK batch batchIdList:BT-005-2026 processed", "POST /api/v2/sorter/scan 201 Created", "E009", "@warehouse-iOS-scan-v1", "UP-E003", "OverflowException: throughput_rate 999.0 exceeds max capacity", "{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}", "[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]", "[\"cid-abc123\",\"status-ok\"]", "ArchiveLog", "10.12.0.105", "192.168.1.11", "dev", "high", "api", "AP-CENTRAL", "axios/1.6.0 (Node.js; warehouse-ui)", "ScanPallet", "site-nyc-01", "/api/v1/archive/log", "GET", "201", "internal", "fail", "task-g7h8i9", "ent-010-wh", "capacity", "jam", "allow", "disabled", "scan", "/data/sorter/output.dat", "1900", "warehouse-east", "false", "v3.2.0", "BIN-G7", "4096", "sorter-engine", "rk-warehouse-008", "tok-wh-yza567bcd890", "warehouse-scan", "control", "sess_abc123", "200", "1100000", "180000", "0.25", "Mobile", "itemPage", "performanceMetric", "vitalsInp", "https://shop.example.com/item/1006", "SSR", "Android 13", "Evasion Technique", "PUT /api/cart/update", "Mozilla/5.0 Firefox/121", "/api/v1/data", "HostPro Inc", "BR", "hosting", "[\"credential_stuffing\"]", "sess_001", "None", "false", "ORD-003", "None", "updateItems", "dc-west" ], [ "Q249 warehouse event record 1", "stdout", "PL-007", "94.6", "42.5", "900.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "88", "1.0", "90", "auto", "500", "5", "2", "30.1", "BS-2026-A1", "segment 88 speed anomaly detected", "ACK batch batchIdList:BT-005-2026 processed", "POST /api/v2/sorter/scan 201 Created", "E009", "@warehouse-iOS-scan-v1", "UP-E003", "OverflowException: throughput_rate 999.0 exceeds max capacity", "{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}", "[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]", "[\"cid-abc123\",\"status-ok\"]", "ArchiveLog", "10.12.0.105", "192.168.1.11", "dev", "high", "api", "AP-CENTRAL", "axios/1.6.0 (Node.js; warehouse-ui)", "ScanPallet", "site-nyc-01", "/api/v1/archive/log", "GET", "201", "internal", "fail", "task-g7h8i9", "ent-010-wh", "capacity", "jam", "allow", "disabled", "scan", "/data/sorter/output.dat", "1900", "warehouse-east", "false", "v3.2.0", "BIN-G7", "4096", "sorter-engine", "rk-warehouse-008", "tok-wh-yza567bcd890", "warehouse-scan", "control", "sess_abc123", "200", "1100000", "180000", "0.25", "Mobile", "itemPage", "performanceMetric", "vitalsInp", "https://shop.example.com/item/1006", "SSR", "Android 13", "Evasion Technique", "PUT /api/cart/update", "Mozilla/5.0 Firefox/121", "/api/v1/data", "HostPro Inc", "BR", "hosting", "[\"credential_stuffing\"]", "sess_001", "None", "false", "ORD-003", "None", "updateItems", "dc-west" ], [ "Q249 warehouse event record 2", "stderr", "PL-008", "45.3", "58.0", "150.0", "SORT-Z9", "LANE-C", "ZONE-2", "CC-ALPHA", "155", "1.5", "1000", "manual", "750", "1", "3", "35.7", "BS-2026-B2", "track TRK-mno-pqr alignment corrected", "ACK batch batchIdList:BT-006-2026 queued", "INFO: batch sync completed, url=http://warehouse.local/sync", "E010", "@warehouse-Linux-scan-v3", "None", "NullPointerException at ConveyorController.handle()", "{\"message\":{\"endpoint\":\"archiveLog\",\"status\":\"ok\"}}", "[\"{\\\"name\\\":\\\"precheck\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"execute\\\",\\\"startTime\\\":\\\"50\\\"}\", \"{\\\"name\\\":\\\"finalize\\\",\\\"startTime\\\":\\\"300\\\"}\"]", "[\"cid-def456\",\"status-pending\"]", "RetryScan", "10.12.1.201", "192.168.1.12", "prod", "medium", "scheduler", "US-EAST", "okhttp/4.12.0 (Android; sort-app)", "RerouteTrack", "site-lon-02", "None", "POST", "204", "inbound", "denied", "task-j0k1l2", "ent-001-wh", "latency", "timeout", "block", "active", "sort", "None", "15", "warehouse-west", "None", "v1.0.0", "BIN-H8", "8192", "conveyor-driver", "rk-warehouse-009", "tok-wh-efg123hij456", "warehouse-track", "None", "var3_stu678", "500", "1200000", "250000", "0.03", "Computer", "searchPage", "interaction", "vitalsCls", "None", "CSR", "Mac OS X (iPhone)", "SQL Injection (Param)", "DELETE /api/session", "PostmanRuntime/7.35", "/swag/graphql", "CloudServe GmbH", "US", "business", "[\"scraping_pattern\",\"ip_hop\",\"rapid_login\"]", "sess_004", "None", "false", "ORD-006", "None", "placeOrder", "dc-east" ], [ "Q249 warehouse event record 3 ACK batch batchIdList:Q249-3", "stdout", "PL-001", "67.9", "75.3", "320.0", "SORT-X1", "LANE-D", "ZONE-3", "CC-BETA", "410", "2.0", "24", "hybrid", "1000", "2", "4", "19.2", "BS-2026-C3", "batch DEF234 registered at loading dock", "ACK batch batchIdList:BT-007-2026 dispatched", "WARN: lane jam detected at conveyor_segment=3", "E001", "@warehouse-Windows-scan-v2", "UP-E005", "TimeoutException: lane LANE-A did not respond within 5000ms", "{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}", "[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]", "[\"cid-ghi789\",\"status-failed\"]", "SyncZone", "10.12.1.202", "192.168.1.13", "prod", "low", "dashboard", "US-WEST", "Alamofire/5.8.0 (iOS; scan-app)", "MergeBatch", "site-tok-03", "/api/v1/zone/sync", "PUT", "400", "inbound", "pass", "task-m3n4o5", "ent-002-wh", "error", "overflow", "allow", "passive", "merge", "/logs/warehouse/error.log", "12", "warehouse-north", "true", "v1.1.2", "BIN-I9", "16384", "zone-controller", "rk-warehouse-010", "tok-wh-klm789nop012", "warehouse-merge", "control", "ctl_vwx901", "404", "2500000", "70000", "0.15", "Tablet", "itemPage", "performanceMetric", "clickEvent", "https://shop.example.com/item/1001", "SSR", "Windows 11", "XSS Reflected (Header)", "GET /.env", "Mozilla/5.0 Safari/17.2", "/ip/192.168.1.1", "DataCenter EU", "JP", "business", "[\"rate_limit_exceeded\",\"geo_anomaly\"]", "sess_003", "None", "false", "ORD-007", "None", "verifyPayment", "dc-west" ], [ "Q249 warehouse event record 4", "stdout", "PL-002", "21.4", "88.7", "480.0", "SORT-A7", "LANE-A", "ZONE-4", "CC-GAMMA", "275", "2.5", "72", "auto", "200", "3", "5", "24.8", "BS-2025-D4", "batch ABC123 processed successfully", "ACK batch batchIdList:BT-008-2026 archived", "ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry", "E002", "@warehouse-Android-track-v1", "None", "DataIntegrityException: pallet_id PL-002 checksum mismatch", "{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}", "[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]", "[\"cid-jkl012\",\"status-ok\"]", "SearchItems", "10.12.1.203", "192.168.1.14", "staging", "critical", "cli", "EU-WEST", "node-fetch/3.3.2 (tracking-service)", "CheckThreshold", "site-syd-04", "None", "DELETE", "404", "outbound", "fail", "task-p6q7r8", "ent-003-wh", "capacity", "mismatch", "allow", "active", "track", "None", "45", "warehouse-south", "None", "v2.0.0", "BIN-J0", "256", "scan-hub", "rk-warehouse-001", "tok-wh-qrs345tuv678", "warehouse-sync", "None", "sess_def456", "200", "1800000", "160000", "0.1", "Mobile", "itemPage", "navigation", "vitalsLcp", "None", "SSR", "Android 14", "Path Traversal", "POST /api/login {\"user\":\"admin\"}", "axios/1.6.0", "/admin/login", "Acme Corp", "US", "hosting", "[\"torbot_ua_mismatch\",\"cookie_reuse\"]", "sess_005", "None", "false", "ORD-008", "None", "updateCart", "dc-east" ], [ "Q250 warehouse event record 0 ACK batch batchIdList:Q250-0", "stdout", "PL-003", "67.9", "75.3", "320.0", "SORT-M3", "LANE-B", "ZONE-1", "CC-DELTA", "410", "2.0", "24", "manual", "1000", "2", "4", "19.2", "BS-2026-C3", "batch DEF234 registered at loading dock", "ACK batch batchIdList:BT-007-2026 dispatched", "WARN: lane jam detected at conveyor_segment=3", "E001", "@warehouse-Windows-scan-v2", "UP-E005", "TimeoutException: lane LANE-A did not respond within 5000ms", "{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}", "[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]", "[\"cid-ghi789\",\"status-failed\"]", "SyncZone", "10.12.1.202", "192.168.1.13", "prod", "low", "dashboard", "US-WEST", "Alamofire/5.8.0 (iOS; scan-app)", "MergeBatch", "site-tok-03", "/api/v1/zone/sync", "PUT", "400", "inbound", "pass", "task-m3n4o5", "ent-002-wh", "error", "overflow", "allow", "passive", "merge", "/logs/warehouse/error.log", "12", "warehouse-north", "true", "v1.1.2", "BIN-I9", "16384", "zone-controller", "rk-warehouse-010", "tok-wh-klm789nop012", "warehouse-merge", "control", "ctl_vwx901", "404", "2500000", "70000", "0.15", "Tablet", "itemPage", "performanceMetric", "clickEvent", "https://shop.example.com/item/1001", "SSR", "Windows 11", "XSS Reflected (Header)", "GET /.env", "Mozilla/5.0 Safari/17.2", "/ip/192.168.1.1", "DataCenter EU", "JP", "business", "[\"rate_limit_exceeded\",\"geo_anomaly\"]", "sess_003", "None", "false", "ORD-007", "None", "verifyPayment", "dc-west" ] ], "results_mode": "rowsort" } }, { "id": "Q250", "sql": "SELECT _timestamp, visitor_session_id, action_category, bot_flag, info_tag FROM \"{stream}\" WHERE action_category NOT IN ('interaction', 'navigation') AND page_slug IN ('itemPage', 'cartPage') AND bot_flag IS NULL AND org_name = 'warehouse-east'", "category": "basic_select", "time_offset": { "start_offset": 14939000000, "end_offset": 15013000000 }, "expected": { "columns": [ "visitor_session_id", "action_category", "bot_flag", "info_tag" ], "results": [ [ "sess_001", "performanceMetric", "None", "None" ], [ "sess_001", "performanceMetric", "None", "None" ] ], "results_mode": "rowsort" } }, { "id": "Q416", "sql": "SELECT _timestamp, COALESCE(page_url, endpoint_path, resource_path, page_slug) AS resolved_page, action_category, latency_ms FROM \"{stream}\" WHERE action_category = 'interaction' ORDER BY latency_ms DESC, _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 24899000000, "end_offset": 24973000000 }, "expected": { "columns": [ "resolved_page", "action_category", "latency_ms" ], "results": [ [ "https://shop.example.com/item/1007", "interaction", "15" ], [ "https://shop.example.com/item/1007", "interaction", "15" ] ], "results_mode": "rowsort" } }, { "id": "Q417", "sql": "SELECT _timestamp, CASE WHEN page_url IS NOT NULL THEN page_url WHEN endpoint_path IS NOT NULL THEN endpoint_path WHEN resource_path IS NOT NULL THEN resource_path ELSE CONCAT('fallback:', page_slug) END AS best_url, visitor_session_id FROM \"{stream}\" WHERE action_category IN ('navigation', 'interaction') ORDER BY _timestamp DESC LIMIT 15", "category": "basic_select", "time_offset": { "start_offset": 24959000000, "end_offset": 25033000000 }, "expected": { "columns": [ "best_url", "visitor_session_id" ], "results": [ [ "https://shop.example.com/item/1002", "sess_005" ] ], "results_mode": "rowsort" } }, { "id": "Q418", "sql": "SELECT _timestamp, component_name, exception_message FROM \"{stream}\" WHERE (exception_message LIKE '%Exception%' OR exception_message LIKE '%Timeout%' OR exception_message LIKE '%Overflow%') AND component_name LIKE '%engine%' ORDER BY _timestamp ASC", "category": "basic_select", "time_offset": { "start_offset": 25019000000, "end_offset": 25093000000 }, "expected": { "columns": [ "component_name", "exception_message" ], "results": [ [ "sorter-engine", "OverflowException: throughput_rate 999.0 exceeds max capacity" ] ], "results_mode": "rowsort" } }, { "id": "Q419", "sql": "SELECT _timestamp, pallet_id, sorter_model, facility_zone, throughput_rate FROM \"{stream}\" WHERE pallet_id IN ('PL-001', 'PL-003', 'PL-005', 'PL-007') AND sorter_model IN ('SORT-X1', 'SORT-M3', 'SORT-Q5') AND throughput_rate > 0 AND facility_zone IS NOT NULL ORDER BY throughput_rate DESC, pallet_id ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 25079000000, "end_offset": 25153000000 }, "expected": { "columns": [ "pallet_id", "sorter_model", "facility_zone", "throughput_rate" ], "results": [ [ "PL-001", "SORT-X1", "ZONE-3", "900.0" ], [ "PL-007", "SORT-M3", "ZONE-1", "900.0" ], [ "PL-003", "SORT-M3", "ZONE-1", "320.0" ], [ "PL-005", "SORT-X1", "ZONE-3", "320.0" ] ], "results_mode": "rowsort" } }, { "id": "Q420", "sql": "SELECT _timestamp, (_timestamp / 1000000) AS ts_seconds, (_timestamp % 60000000) AS within_minute, action_category, page_slug FROM \"{stream}\" WHERE action_category = 'performanceMetric' ORDER BY _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 25139000000, "end_offset": 25213000000 }, "expected": { "columns": [ "ts_seconds", "within_minute", "action_category", "page_slug" ], "results": [ [ "1786709040.0", "0", "performanceMetric", "itemPage" ], [ "1786709076.0", "36000000", "performanceMetric", "searchPage" ], [ "1786709094.0", "54000000", "performanceMetric", "cartPage" ], [ "1786709100.0", "0", "performanceMetric", "cartPage" ], [ "1786709112.0", "12000000", "performanceMetric", "itemPage" ] ], "results_mode": "rowsort" } }, { "id": "Q421", "sql": "SELECT _timestamp, alert_tags, auth_token, bin_code, action_category FROM \"{stream}\" WHERE alert_tags IN ('latency', 'error', 'capacity') AND bin_code LIKE 'BIN-%' AND action_category = 'performanceMetric' ORDER BY alert_tags ASC, _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 25199000000, "end_offset": 25273000000 }, "expected": { "columns": [ "alert_tags", "auth_token", "bin_code", "action_category" ], "results": [ [ "capacity", "tok-wh-abc123def456", "BIN-C3", "performanceMetric" ], [ "capacity", "tok-wh-abc123def456", "BIN-C3", "performanceMetric" ], [ "error", "tok-wh-cde567fgh890", "BIN-B2", "performanceMetric" ], [ "latency", "tok-wh-ghi789jkl012", "BIN-D4", "performanceMetric" ] ], "results_mode": "rowsort" } }, { "id": "Q422", "sql": "SELECT _timestamp, client_agent, geo_org, geo_country, action_category FROM \"{stream}\" WHERE geo_org IS NOT NULL ORDER BY geo_org ASC, _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 25259000000, "end_offset": 25333000000 }, "expected": { "columns": [ "client_agent", "geo_org", "geo_country", "action_category" ], "results": [ [ "Go-http-client/2.0 conveyor-monitor", "Acme Corp", "UK", "interaction" ], [ "okhttp/4.12.0 (Android; sort-app)", "CloudServe GmbH", "US", "interaction" ], [ "okhttp/4.12.0 (Android; sort-app)", "CloudServe GmbH", "US", "interaction" ], [ "Alamofire/5.8.0 (iOS; scan-app)", "DataCenter EU", "JP", "performanceMetric" ], [ "axios/1.6.0 (Node.js; warehouse-ui)", "HostPro Inc", "BR", "performanceMetric" ], [ "PostmanRuntime/7.35.0", "NetGuard AS", "US", "navigation" ], [ "PostmanRuntime/7.35.0", "NetGuard AS", "US", "navigation" ] ], "results_mode": "rowsort" } }, { "id": "Q423", "sql": "SELECT _timestamp, guard_mode, inp_micros, cls_score, device_type FROM \"{stream}\" WHERE guard_mode IN ('active', 'passive') AND inp_micros > 100000 AND cls_score > 0.05 AND device_type = 'Mobile' ORDER BY inp_micros DESC, _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 25319000000, "end_offset": 25393000000 }, "expected": { "columns": [ "guard_mode", "inp_micros", "cls_score", "device_type" ], "results": [ [ "active", "160000", "0.1", "Mobile" ] ], "results_mode": "rowsort" } }, { "id": "Q424", "sql": "SELECT _timestamp, operation_name, payload_size, route_key, response_code FROM \"{stream}\" WHERE operation_name IS NOT NULL AND payload_size > 256 ORDER BY payload_size DESC, operation_name ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 25379000000, "end_offset": 25453000000 }, "expected": { "columns": [ "operation_name", "payload_size", "route_key", "response_code" ], "results": [ [ "RetryScan", "65536", "rk-warehouse-003", "503" ], [ "RetryScan", "65536", "rk-warehouse-003", "503" ], [ "ArchiveLog", "32768", "rk-warehouse-002", "500" ], [ "UpdateBatch", "1024", "rk-warehouse-006", "200" ], [ "SearchItems", "512", "rk-warehouse-005", "403" ], [ "SearchItems", "512", "rk-warehouse-005", "403" ] ], "results_mode": "rowsort" } }, { "id": "Q425", "sql": "SELECT _timestamp, query_source, render_scope, route_key, site_name FROM \"{stream}\" WHERE query_source IN ('dashboard', 'api', 'cli') AND render_scope IN ('SSR', 'CSR') AND site_name LIKE 'site-%' ORDER BY query_source ASC, site_name ASC, _timestamp DESC LIMIT 12", "category": "basic_select", "time_offset": { "start_offset": 25439000000, "end_offset": 25513000000 }, "expected": { "columns": [ "query_source", "render_scope", "route_key", "site_name" ], "results": [ [ "api", "SSR", "rk-warehouse-008", "site-nyc-01" ], [ "api", "SSR", "rk-warehouse-008", "site-nyc-01" ], [ "cli", "SSR", "rk-warehouse-005", "site-sin-08" ], [ "cli", "CSR", "rk-warehouse-007", "site-tor-10" ], [ "dashboard", "SSR", "rk-warehouse-006", "site-mum-09" ], [ "dashboard", "SSR", "rk-warehouse-006", "site-mum-09" ] ], "results_mode": "rowsort" } }, { "id": "Q426", "sql": "SELECT _timestamp, array_extract(regexp_match(client_agent, '([A-Za-z]+)/[0-9.]+'), 1) AS agent_family, action_category, page_slug FROM \"{stream}\" WHERE client_agent IS NOT NULL AND action_category = 'navigation' ORDER BY agent_family ASC, _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 25499000000, "end_offset": 25573000000 }, "expected": { "columns": [ "agent_family", "action_category", "page_slug" ], "results": [ [ "fetch", "navigation", "itemPage" ], [ "fetch", "navigation", "itemPage" ] ], "results_mode": "rowsort" } }, { "id": "Q427", "sql": "SELECT _timestamp, action_category, (CASE WHEN page_url IS NULL AND endpoint_path IS NULL THEN 'both_missing' WHEN page_url IS NULL THEN 'only_page_url_missing' WHEN endpoint_path IS NULL THEN 'only_endpoint_missing' ELSE 'both_present' END) AS url_status FROM \"{stream}\" WHERE action_category IN ('performanceMetric', 'interaction') ORDER BY url_status, _timestamp ASC LIMIT 15", "category": "basic_select", "time_offset": { "start_offset": 25559000000, "end_offset": 25633000000 }, "expected": { "columns": [ "action_category", "url_status" ], "results": [ [ "performanceMetric", "both_missing" ], [ "performanceMetric", "both_missing" ], [ "performanceMetric", "both_missing" ], [ "performanceMetric", "both_present" ], [ "performanceMetric", "both_present" ], [ "performanceMetric", "both_present" ] ], "results_mode": "rowsort" } }, { "id": "Q554", "sql": "SELECT _timestamp, COALESCE(bot_flag, info_tag, passthrough_flag, 'clean') AS security_tag, CAST(COALESCE(lcp_micros, inp_micros, latency_ms) AS FLOAT) AS perf_value, device_type, page_slug FROM \"{stream}\" ORDER BY perf_value DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 33179000000, "end_offset": 33253000000 }, "expected": { "columns": [ "security_tag", "perf_value", "device_type", "page_slug" ], "results": [ [ "verified_bot", "3200000.0", "Computer", "searchPage" ], [ "false", "2800000.0", "Computer", "checkoutPage" ], [ "false", "2800000.0", "Computer", "checkoutPage" ], [ "true", "2100000.0", "Mobile", "itemPage" ], [ "false", "1500000.0", "Tablet", "itemPage" ], [ "false", "900000.0", "Mobile", "cartPage" ], [ "false", "900000.0", "Mobile", "cartPage" ] ], "results_mode": "rowsort" } }, { "id": "Q555", "sql": "SELECT _timestamp, COALESCE(exception_message, log_message) AS msg, COALESCE(response_code, 0) AS status, latency_ms FROM \"{stream}\" WHERE latency_ms IS NOT NULL ORDER BY latency_ms DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 33239000000, "end_offset": 33313000000 }, "expected": { "columns": [ "msg", "status", "latency_ms" ], "results": [ [ "ValidationException: item_count exceeds defect_limit bounds", "200", "3200" ], [ "ValidationException: item_count exceeds defect_limit bounds", "200", "3200" ], [ "OverflowException: throughput_rate 999.0 exceeds max capacity", "201", "1900" ], [ "OverflowException: throughput_rate 999.0 exceeds max capacity", "201", "1900" ], [ "NetworkException: connection to batch sync failed", "403", "567" ], [ "StateTransitionException: operation_mode hybrid invalid state", "200", "78" ], [ "NullPointerException at ConveyorController.handle()", "204", "15" ] ], "results_mode": "rowsort" } }, { "id": "Q632", "sql": "SELECT _timestamp, pallet_id FROM \"{stream}\" WHERE pallet_id = 'NONEXISTENT' ORDER BY _timestamp", "category": "basic_select", "time_offset": { "start_offset": 37800000000, "end_offset": 37980000000 }, "expected": { "columns": [ "pallet_id" ], "results": [], "results_mode": "rowsort" } }, { "id": "Q633", "sql": "SELECT facility_zone, ROUND(SUM(throughput_rate) / NULLIF(COUNT(*) FILTER (WHERE load_factor < 0), 0), 2) AS ratio FROM \"{stream}\" GROUP BY facility_zone ORDER BY facility_zone", "category": "basic_select", "time_offset": { "start_offset": 37860000000, "end_offset": 38040000000 }, "expected": { "columns": [ "facility_zone", "ratio" ], "results": [ [ "ZONE-1", "None" ], [ "ZONE-2", "None" ], [ "ZONE-3", "None" ], [ "ZONE-4", "None" ] ], "results_mode": "rowsort" } }, { "id": "Q634", "sql": "SELECT _timestamp, log FROM \"{stream}\" ORDER BY _timestamp LIMIT 5 OFFSET 9999", "category": "basic_select", "time_offset": { "start_offset": 37920000000, "end_offset": 38100000000 }, "expected": { "columns": [ "log" ], "results": [], "results_mode": "rowsort" } }, { "id": "Q635", "sql": "SELECT _timestamp, COALESCE(upstream_error_code, 'N/A') AS ue, COALESCE(endpoint_path, 'N/A') AS ep, COALESCE(resource_path, 'N/A') AS rp FROM \"{stream}\" WHERE upstream_error_code IS NOT NULL OR endpoint_path IS NOT NULL OR resource_path IS NOT NULL ORDER BY _timestamp LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 37980000000, "end_offset": 38160000000 }, "expected": { "columns": [ "ue", "ep", "rp" ], "results": [ [ "UP-E007", "/api/v1/warehouse/update", "/config/zone/ZONE-2.yaml" ], [ "UP-E008", "/api/v1/warehouse/delete", "/logs/warehouse/access.log" ], [ "UP-E008", "/api/v1/warehouse/delete", "/logs/warehouse/access.log" ], [ "UP-E010", "/api/v2/sorter/reroute", "/config/zone/ZONE-3.yaml" ], [ "UP-E010", "/api/v2/sorter/reroute", "/config/zone/ZONE-3.yaml" ], [ "UP-E002", "/api/v1/health/check", "/logs/warehouse/app.log" ], [ "UP-E004", "/api/v2/sorter/retry", "/config/zone/ZONE-1.yaml" ], [ "UP-E004", "/api/v2/sorter/retry", "/config/zone/ZONE-1.yaml" ], [ "UP-E006", "/api/v1/warehouse/search", "/data/sorter/input.dat" ], [ "UP-E006", "/api/v1/warehouse/search", "/data/sorter/input.dat" ] ], "results_mode": "rowsort", "skip_sqllogictest": true } }, { "id": "Q636", "sql": "SELECT facility_zone, ROUND(STDDEV(throughput_rate), 2) AS tput_stddev, ROUND(STDDEV(load_factor), 2) AS load_stddev, COUNT(*) AS n FROM \"{stream}\" GROUP BY facility_zone ORDER BY facility_zone", "category": "basic_select", "time_offset": { "start_offset": 38040000000, "end_offset": 38220000000 }, "expected": { "columns": [ "facility_zone", "tput_stddev", "load_stddev", "n" ], "results": [ [ "ZONE-1", "233.45", "26.3", "5" ], [ "ZONE-2", "249.08", "19.98", "4" ], [ "ZONE-3", "169.28", "30.16", "4" ], [ "ZONE-4", "180.09", "33.79", "3" ] ], "results_mode": "rowsort", "skip_sqllogictest": true } }, { "id": "Q637", "sql": "SELECT _timestamp, COALESCE(bot_flag, 'NULL_FLAG') AS bot, COALESCE(info_tag, 'NULL_TAG') AS tag FROM \"{stream}\" ORDER BY _timestamp LIMIT 15", "category": "basic_select", "time_offset": { "start_offset": 38100000000, "end_offset": 38280000000 }, "expected": { "columns": [ "bot", "tag" ], "results": [ [ "NULL_FLAG", "NULL_TAG" ], [ "suspicious", "NULL_TAG" ], [ "suspicious", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "Blocklisted" ], [ "NULL_FLAG", "Blocklisted" ], [ "verified_bot", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ], [ "NULL_FLAG", "NULL_TAG" ] ], "results_mode": "rowsort" } }, { "id": "Q638", "sql": "SELECT bot_flag, COUNT(*) AS cnt FROM \"{stream}\" GROUP BY bot_flag ORDER BY cnt DESC", "category": "basic_select", "time_offset": { "start_offset": 38160000000, "end_offset": 38340000000 }, "expected": { "columns": [ "bot_flag", "cnt" ], "results": [ [ "None", "15" ], [ "verified_bot", "1" ] ], "results_mode": "rowsort", "skip_sqllogictest": true, "skip_column_check": true } }, { "id": "Q639", "sql": "SELECT _timestamp, pallet_id, facility_zone, throughput_rate FROM \"{stream}\" WHERE throughput_rate > 700 AND load_factor > 80 AND re_match(facility_zone, 'ZONE-[1-3]') AND response_code IN (200, 201) AND action_category = 'performanceMetric' ORDER BY _timestamp LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 38220000000, "end_offset": 38400000000 }, "expected": { "columns": [ "pallet_id", "facility_zone", "throughput_rate" ], "results": [ [ "PL-003", "ZONE-1", "900.0" ], [ "PL-005", "ZONE-3", "900.0" ] ], "results_mode": "rowsort" } }, { "id": "Q640", "sql": "SELECT _timestamp, throughput_rate FROM \"{stream}\" WHERE throughput_rate BETWEEN 200 AND 800 AND _timestamp BETWEEN (SELECT MIN(_timestamp) FROM \"{stream}\") AND (SELECT MAX(_timestamp) FROM \"{stream}\" WHERE throughput_rate > 500) ORDER BY _timestamp LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 38280000000, "end_offset": 38460000000 }, "expected": { "columns": [ "throughput_rate" ], "results": [ [ "320.0" ], [ "320.0" ], [ "480.0" ], [ "480.0" ], [ "610.0" ], [ "725.0" ], [ "725.0" ], [ "290.0" ], [ "555.0" ], [ "555.0" ] ], "results_mode": "rowsort", "skip_sqllogictest": true } }, { "id": "Q641", "sql": "SELECT MAX(throughput_rate) AS max_tput, MIN(throughput_rate) AS min_tput FROM \"{stream}\" WHERE facility_zone = 'ZONE-99'", "category": "basic_select", "time_offset": { "start_offset": 38340000000, "end_offset": 38520000000 }, "expected": { "skip_sqllogictest": true, "skip_row_count": true, "skip_column_check": true, "columns": [ "max_tput", "min_tput" ] } }, { "id": "Q642", "sql": "SELECT _timestamp, pallet_id, facility_zone FROM \"{stream}\" WHERE pallet_id IN (SELECT pallet_id FROM \"{stream}\" WHERE throughput_rate > 600) AND facility_zone IN ('ZONE-1', 'ZONE-2', 'ZONE-3') ORDER BY _timestamp LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 38400000000, "end_offset": 38580000000 }, "expected": { "columns": [ "pallet_id", "facility_zone" ], "results": [ [ "PL-005", "ZONE-3" ], [ "PL-007", "ZONE-1" ], [ "PL-003", "ZONE-1" ], [ "PL-005", "ZONE-3" ], [ "PL-007", "ZONE-1" ], [ "PL-003", "ZONE-1" ], [ "PL-005", "ZONE-3" ] ], "results_mode": "rowsort", "skip_sqllogictest": true } }, { "id": "Q643", "sql": "SELECT DISTINCT facility_zone, operation_mode, scan_category FROM \"{stream}\" ORDER BY facility_zone, operation_mode, scan_category", "category": "basic_select", "time_offset": { "start_offset": 38460000000, "end_offset": 38640000000 }, "expected": { "columns": [ "facility_zone", "operation_mode", "scan_category" ], "results": [ [ "ZONE-1", "auto", "inbound" ], [ "ZONE-1", "auto", "outbound" ], [ "ZONE-1", "manual", "inbound" ], [ "ZONE-1", "manual", "internal" ], [ "ZONE-2", "auto", "inbound" ], [ "ZONE-2", "auto", "outbound" ], [ "ZONE-2", "manual", "inbound" ], [ "ZONE-2", "manual", "internal" ], [ "ZONE-3", "hybrid", "inbound" ], [ "ZONE-3", "manual", "internal" ], [ "ZONE-4", "auto", "internal" ], [ "ZONE-4", "auto", "outbound" ], [ "ZONE-4", "hybrid", "inbound" ] ], "results_mode": "rowsort", "skip_sqllogictest": true } }, { "id": "Q644", "sql": "SELECT _timestamp, org_name, page_slug FROM \"{stream}\" WHERE org_name NOT IN ('warehouse-central', 'warehouse-north', 'warehouse-south') AND page_slug NOT IN ('homePage', 'searchPage') ORDER BY _timestamp LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 38520000000, "end_offset": 38700000000 }, "expected": { "columns": [ "org_name", "page_slug" ], "results": [ [ "warehouse-east", "cartPage" ], [ "warehouse-east", "cartPage" ], [ "warehouse-west", "itemPage" ], [ "warehouse-east", "itemPage" ], [ "warehouse-east", "itemPage" ] ], "results_mode": "rowsort", "skip_sqllogictest": true } }, { "id": "Q645", "sql": "SELECT _timestamp, log, CHAR_LENGTH(log) AS len, CHAR_LENGTH(TRIM(log)) AS trimmed_len FROM \"{stream}\" ORDER BY _timestamp LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 38580000000, "end_offset": 38760000000 }, "expected": { "columns": [ "log", "len", "trimmed_len" ], "results": [ [ "Q644 warehouse event record 0 ACK batch batchIdList:Q644-0", "58", "58" ], [ "Q643 warehouse event record 4", "29", "29" ], [ "Q644 warehouse event record 1", "29", "29" ], [ "Q644 warehouse event record 2", "29", "29" ], [ "Q644 warehouse event record 3 ACK batch batchIdList:Q644-3", "58", "58" ], [ "Q645 warehouse event record 0 ACK batch batchIdList:Q645-0", "58", "58" ], [ "Q644 warehouse event record 4", "29", "29" ], [ "Q645 warehouse event record 1", "29", "29" ], [ "Q645 warehouse event record 2", "29", "29" ], [ "Q645 warehouse event record 3 ACK batch batchIdList:Q645-3", "58", "58" ] ], "results_mode": "rowsort" } }, { "id": "Q646", "sql": "SELECT _timestamp, UPPER(org_name) AS org_upper, LOWER(scan_category) AS scan_lower FROM \"{stream}\" WHERE re_match(LOWER(org_name), 'warehouse') ORDER BY _timestamp LIMIT 15", "category": "basic_select", "time_offset": { "start_offset": 38640000000, "end_offset": 38820000000 }, "expected": { "columns": [ "org_upper", "scan_lower" ], "results": [ [ "WAREHOUSE-NORTH", "internal" ], [ "WAREHOUSE-SOUTH", "inbound" ], [ "WAREHOUSE-SOUTH", "inbound" ], [ "WAREHOUSE-CENTRAL", "outbound" ], [ "WAREHOUSE-EAST", "internal" ], [ "WAREHOUSE-EAST", "internal" ], [ "WAREHOUSE-WEST", "inbound" ], [ "WAREHOUSE-WEST", "inbound" ], [ "WAREHOUSE-NORTH", "inbound" ], [ "WAREHOUSE-SOUTH", "outbound" ], [ "WAREHOUSE-SOUTH", "outbound" ], [ "WAREHOUSE-CENTRAL", "internal" ], [ "WAREHOUSE-CENTRAL", "internal" ], [ "WAREHOUSE-EAST", "inbound" ], [ "WAREHOUSE-WEST", "outbound" ] ], "results_mode": "rowsort" } }, { "id": "Q980", "sql": "SELECT _timestamp, facility_zone, load_factor, throughput_rate, CASE WHEN load_factor >= 80.0 AND cell_temp >= 30.0 THEN 'CRITICAL' WHEN load_factor >= 50.0 AND cell_temp >= 25.0 THEN 'WARNING' WHEN load_factor >= 20.0 THEN 'NORMAL' WHEN charge_remaining < 20.0 THEN 'LOW_CHARGE' ELSE 'UNKNOWN' END AS status, COALESCE(bot_flag, info_tag) AS security_flag FROM \"{stream}\" ORDER BY _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 58739000000, "end_offset": 58813000000 }, "expected": { "columns": [ "facility_zone", "load_factor", "throughput_rate", "status", "security_flag" ], "results": [ [ "ZONE-3", "67.9", "320.0", "NORMAL", "None" ], [ "ZONE-2", "21.4", "480.0", "NORMAL", "None" ], [ "ZONE-4", "21.4", "480.0", "NORMAL", "None" ], [ "ZONE-1", "99.0", "610.0", "WARNING", "verified_bot" ], [ "ZONE-2", "12.5", "725.0", "LOW_CHARGE", "None" ], [ "ZONE-4", "12.5", "725.0", "LOW_CHARGE", "None" ], [ "ZONE-3", "33.0", "840.0", "NORMAL", "None" ] ], "results_mode": "rowsort" } }, { "id": "Q981", "sql": "SELECT _timestamp, COALESCE(exception_message, log_message, log) AS message, COALESCE(response_code, 0) AS status, latency_ms, COALESCE(scan_category, 'not_scanned') AS scan_type FROM \"{stream}\" WHERE latency_ms IS NOT NULL ORDER BY latency_ms DESC NULLS LAST LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 58799000000, "end_offset": 58873000000 }, "expected": { "columns": [ "message", "status", "latency_ms", "scan_type" ], "results": [ [ "ValidationException: item_count exceeds defect_limit bounds", "200", "3200", "inbound" ], [ "ValidationException: item_count exceeds defect_limit bounds", "200", "3200", "inbound" ], [ "SecurityException: unauthorized access to control_center CC-ALPHA", "503", "1450", "inbound" ], [ "NetworkException: connection to batch sync failed", "403", "567", "internal" ], [ "ConfigurationException: missing facility_zone ZONE-3 override", "401", "89", "outbound" ], [ "ConfigurationException: missing facility_zone ZONE-3 override", "401", "89", "outbound" ], [ "StateTransitionException: operation_mode hybrid invalid state", "200", "78", "outbound" ] ], "results_mode": "rowsort" } }, { "id": "Q982", "sql": "SELECT _timestamp, pallet_id, sorter_model, facility_zone, throughput_rate FROM \"{stream}\" WHERE facility_zone IN ('ZONE-1', 'ZONE-2') AND throughput_rate > 200 AND (operation_mode = 'auto' OR charge_remaining > 40.0) ORDER BY throughput_rate DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 58859000000, "end_offset": 58933000000 }, "expected": { "columns": [ "pallet_id", "sorter_model", "facility_zone", "throughput_rate" ], "results": [ [ "PL-007", "SORT-M3", "ZONE-1", "555.0" ], [ "PL-003", "SORT-M3", "ZONE-1", "320.0" ] ], "results_mode": "rowsort" } }, { "id": "Q983", "sql": "SELECT _timestamp, component_name, region_code, latency_ms, response_code, CASE WHEN latency_ms < 100 THEN 'fast' WHEN latency_ms < 500 THEN 'normal' WHEN latency_ms < 2000 THEN 'slow' ELSE 'very_slow' END AS latency_tier FROM \"{stream}\" WHERE latency_ms IS NOT NULL ORDER BY latency_ms ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 58919000000, "end_offset": 58993000000 }, "expected": { "columns": [ "component_name", "region_code", "latency_ms", "response_code", "latency_tier" ], "results": [ [ "zone-controller", "US-WEST", "12", "400", "fast" ], [ "zone-controller", "US-WEST", "12", "400", "fast" ], [ "conveyor-driver", "US-EAST", "15", "204", "fast" ], [ "scan-hub", "EU-WEST", "45", "404", "fast" ], [ "track-router", "EU-NORTH", "230", "500", "normal" ], [ "track-router", "EU-NORTH", "230", "500", "normal" ], [ "batch-sync", "AP-SOUTH", "1450", "503", "slow" ] ], "results_mode": "rowsort" } }, { "id": "Q984", "sql": "SELECT _timestamp, COALESCE(bot_flag, info_tag, passthrough_flag, 'clean') AS security_tag, CAST(COALESCE(lcp_micros, inp_micros, latency_ms) AS FLOAT) AS perf_value, device_type, page_slug FROM \"{stream}\" WHERE device_type IS NOT NULL ORDER BY perf_value DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 58979000000, "end_offset": 59053000000 }, "expected": { "columns": [ "security_tag", "perf_value", "device_type", "page_slug" ], "results": [ [ "verified_bot", "3200000.0", "Computer", "searchPage" ], [ "false", "2800000.0", "Computer", "checkoutPage" ], [ "false", "2800000.0", "Computer", "checkoutPage" ], [ "true", "2100000.0", "Mobile", "itemPage" ], [ "false", "1500000.0", "Tablet", "itemPage" ], [ "false", "900000.0", "Mobile", "cartPage" ], [ "false", "900000.0", "Mobile", "cartPage" ] ], "results_mode": "rowsort" } }, { "id": "Q985", "sql": "SELECT DISTINCT facility_zone, control_center, operation_mode, sorter_model FROM \"{stream}\" WHERE facility_zone IN ('ZONE-1', 'ZONE-3') ORDER BY facility_zone, control_center LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59039000000, "end_offset": 59113000000 }, "expected": { "columns": [ "facility_zone", "control_center", "operation_mode", "sorter_model" ], "results": [ [ "ZONE-1", "CC-DELTA", "manual", "SORT-M3" ], [ "ZONE-1", "CC-DELTA", "auto", "SORT-M3" ], [ "ZONE-3", "CC-BETA", "manual", "SORT-X1" ], [ "ZONE-3", "CC-BETA", "hybrid", "SORT-X1" ] ], "results_mode": "rowsort" } }, { "id": "Q986", "sql": "SELECT _timestamp, pallet_id, throughput_rate, load_factor, cell_temp, throughput_rate / NULLIF(load_factor, 0) AS efficiency_ratio FROM \"{stream}\" WHERE load_factor > 0 ORDER BY efficiency_ratio DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59099000000, "end_offset": 59173000000 }, "expected": { "columns": [ "pallet_id", "throughput_rate", "load_factor", "cell_temp", "efficiency_ratio" ], "results": [ [ "PL-006", "480.0", "21.4", "24.8", "22.429906542056077" ], [ "PL-008", "480.0", "21.4", "24.8", "22.429906542056077" ], [ "PL-003", "900.0", "94.6", "30.1", "9.513742071881607" ], [ "PL-007", "610.0", "99.0", "28.9", "6.161616161616162" ], [ "PL-005", "320.0", "67.9", "19.2", "4.71281296023564" ], [ "PL-002", "150.0", "45.3", "35.7", "3.3112582781456954" ], [ "PL-004", "150.0", "45.3", "35.7", "3.3112582781456954" ] ], "results_mode": "rowsort" } }, { "id": "Q987", "sql": "SELECT _timestamp, component_name, latency_ms, lcp_micros, inp_micros, COALESCE(latency_ms, lcp_micros, inp_micros) AS any_latency FROM \"{stream}\" WHERE latency_ms IS NOT NULL OR lcp_micros IS NOT NULL ORDER BY _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59159000000, "end_offset": 59233000000 }, "expected": { "columns": [ "component_name", "latency_ms", "lcp_micros", "inp_micros", "any_latency" ], "results": [ [ "scan-hub", "45", "1800000", "160000", "45" ], [ "track-router", "230", "3200000", "80000", "230" ], [ "track-router", "230", "3200000", "80000", "230" ], [ "batch-sync", "1450", "900000", "150000", "1450" ], [ "pallet-mapper", "89", "1500000", "200000", "89" ], [ "pallet-mapper", "89", "1500000", "200000", "89" ], [ "lane-monitor", "567", "2800000", "95000", "567" ] ], "results_mode": "rowsort" } }, { "id": "Q988", "sql": "SELECT _timestamp, org_name, site_name, COALESCE(org_name, site_name, region_code) AS location, latency_ms FROM \"{stream}\" WHERE org_name IS NOT NULL OR site_name IS NOT NULL ORDER BY _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59219000000, "end_offset": 59293000000 }, "expected": { "columns": [ "org_name", "site_name", "location", "latency_ms" ], "results": [ [ "warehouse-west", "site-dub-07", "warehouse-west", "89" ], [ "warehouse-north", "site-sin-08", "warehouse-north", "567" ], [ "warehouse-north", "site-sin-08", "warehouse-north", "567" ], [ "warehouse-south", "site-mum-09", "warehouse-south", "3200" ], [ "warehouse-central", "site-tor-10", "warehouse-central", "78" ], [ "warehouse-central", "site-tor-10", "warehouse-central", "78" ], [ "warehouse-east", "site-nyc-01", "warehouse-east", "1900" ] ], "results_mode": "rowsort" } }, { "id": "Q989", "sql": "SELECT _timestamp, facility_zone, throughput_rate, item_count, defect_limit, item_count * defect_limit AS quality_index FROM \"{stream}\" ORDER BY quality_index DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59279000000, "end_offset": 59353000000 }, "expected": { "columns": [ "facility_zone", "throughput_rate", "item_count", "defect_limit", "quality_index" ], "results": [ [ "ZONE-3", "320.0", "410", "2.0", "820.0" ], [ "ZONE-1", "320.0", "410", "2.0", "820.0" ], [ "ZONE-4", "480.0", "275", "2.5", "687.5" ], [ "ZONE-2", "150.0", "155", "1.5", "232.5" ], [ "ZONE-4", "190.0", "340", "0.5", "170.0" ], [ "ZONE-3", "900.0", "88", "1.0", "88.0" ], [ "ZONE-1", "900.0", "88", "1.0", "88.0" ] ], "results_mode": "rowsort" } }, { "id": "Q990", "sql": "SELECT _timestamp, conveyor_lane, conveyor_segment, facility_zone, throughput_rate FROM \"{stream}\" WHERE conveyor_lane IN ('LANE-A', 'LANE-B') AND conveyor_segment <= 3 ORDER BY conveyor_lane, conveyor_segment, _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59339000000, "end_offset": 59413000000 }, "expected": { "columns": [ "conveyor_lane", "conveyor_segment", "facility_zone", "throughput_rate" ], "results": [ [ "LANE-A", "2", "ZONE-4", "725.0" ], [ "LANE-B", "3", "ZONE-1", "840.0" ] ], "results_mode": "rowsort" } }, { "id": "Q991", "sql": "SELECT _timestamp, pallet_id, runtime_hours, scan_attempts, runtime_hours / NULLIF(scan_attempts, 0) AS hours_per_scan FROM \"{stream}\" WHERE scan_attempts > 0 ORDER BY hours_per_scan DESC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59399000000, "end_offset": 59473000000 }, "expected": { "columns": [ "pallet_id", "runtime_hours", "scan_attempts", "hours_per_scan" ], "results": [ [ "PL-008", "500", "2", "250.0" ], [ "PL-003", "720", "4", "180.0" ], [ "PL-004", "360", "2", "180.0" ], [ "PL-005", "720", "4", "180.0" ], [ "PL-006", "48", "1", "48.0" ], [ "PL-007", "120", "3", "40.0" ], [ "PL-001", "120", "3", "40.0" ] ], "results_mode": "rowsort" } }, { "id": "Q992", "sql": "SELECT _timestamp, node_ip, source_ip, app_label, datacenter, latency_ms FROM \"{stream}\" WHERE node_ip IS NOT NULL AND source_ip IS NOT NULL ORDER BY latency_ms ASC NULLS LAST LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59459000000, "end_offset": 59533000000 }, "expected": { "columns": [ "node_ip", "source_ip", "app_label", "datacenter", "latency_ms" ], "results": [ [ "10.12.1.202", "192.168.1.13", "warehouse-merge", "dc-west", "12" ], [ "10.12.1.201", "192.168.1.12", "warehouse-track", "dc-east", "15" ], [ "10.12.1.201", "192.168.1.12", "warehouse-track", "dc-east", "15" ], [ "10.12.0.104", "192.168.1.10", "warehouse-sort", "dc-central", "78" ], [ "10.12.0.104", "192.168.1.10", "warehouse-sort", "dc-central", "78" ], [ "10.12.0.105", "192.168.1.11", "warehouse-scan", "dc-west", "1900" ], [ "10.12.0.103", "192.168.2.24", "warehouse-sync", "dc-east", "3200" ] ], "results_mode": "rowsort" } }, { "id": "Q993", "sql": "SELECT _timestamp, component_name, guard_mode, filter_result, auth_result, CASE WHEN guard_mode = 'active' AND filter_result = 'block' THEN 'blocked' WHEN guard_mode = 'active' AND filter_result = 'allow' THEN 'allowed' WHEN guard_mode = 'passive' THEN 'monitored' ELSE 'bypassed' END AS traffic_action FROM \"{stream}\" ORDER BY _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59519000000, "end_offset": 59593000000 }, "expected": { "columns": [ "component_name", "guard_mode", "filter_result", "auth_result", "traffic_action" ], "results": [ [ "conveyor-driver", "active", "block", "denied", "blocked" ], [ "zone-controller", "passive", "allow", "pass", "monitored" ], [ "zone-controller", "passive", "allow", "pass", "monitored" ], [ "scan-hub", "active", "allow", "fail", "allowed" ], [ "track-router", "passive", "block", "pass", "monitored" ], [ "track-router", "passive", "block", "pass", "monitored" ], [ "batch-sync", "disabled", "allow", "pass", "bypassed" ] ], "results_mode": "rowsort" } }, { "id": "Q994", "sql": "SELECT _timestamp, COALESCE(build_signature, build_version) AS build, os_platform, device_type, render_scope, lcp_micros, cls_score FROM \"{stream}\" WHERE device_type IS NOT NULL ORDER BY _timestamp ASC LIMIT 10", "category": "basic_select", "time_offset": { "start_offset": 59579000000, "end_offset": 59653000000 }, "expected": { "columns": [ "build", "os_platform", "device_type", "render_scope", "lcp_micros", "cls_score" ], "results": [ [ "BS-2026-A1", "iOS 18.1", "Computer", "CSR", "3200000", "0.2" ], [ "BS-2026-B2", "Android 12", "Mobile", "SSR", "900000", "0.3" ], [ "BS-2026-B2", "Android 12", "Mobile", "SSR", "900000", "0.3" ], [ "BS-2026-C3", "Mac OS X (iPhone)", "Tablet", "CSR", "1500000", "0.06" ], [ "BS-2025-D4", "Android 14", "Computer", "SSR", "2800000", "0.05" ], [ "BS-2025-D4", "Android 14", "Computer", "SSR", "2800000", "0.05" ], [ "BS-2026-A1", "Android 14", "Mobile", "SSR", "2100000", "0.12" ] ], "results_mode": "rowsort" } } ], "last_query_id": 35 }