Files
openobserve/tests/test-data/query-agent/queries/basic_select.json
T
Neha PandClaude Opus 4.7 008398163b test: add more queries to query regression (#12487)
## Summary
- Adds **100 new structural-pattern queries** (Q411-Q510) across all 13
categories, bringing the suite from 425 to **525 queries**
- Adds **cross-stream JOIN/UNION support**: `stream_offset` in
data_gen.py, `STREAM2` in conftest, dual-table DuckDB oracle
- 15 cross-stream queries (Q401-Q415) covering INNER/LEFT/RIGHT JOIN,
EXISTS/NOT EXISTS, UNION ALL across streams
- Bumps data_gen.py from 510 to 520 query capacity

## Changes
- **Infrastructure**:
[conftest.py](tests/api-testing/tests/query_agent/conftest.py),
[compute_counts.py](tests/test-data/query-agent/compute_counts.py),
[data_gen.py](tests/test-data/query-agent/data_gen.py)
- **New file**:
[cross_stream.json](tests/test-data/query-agent/queries/cross_stream.json)
— 15 queries
- **12 categories**: 85 queries across aggregation, basic_select,
combined, cte_subquery, date_time, full_text_search, histogram,
math_functions, pagination, string_functions, union, window

## Test plan
- [x] `compute_counts.py` generates expected results for all 525 queries
- [ ] Run `pytest tests/query_agent/ -v` against target environment (565
tests expected)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-08 04:38:40 +00:00

6429 lines
174 KiB
JSON

{
"queries": [
{
"id": "Q021",
"sql": "SELECT _timestamp, pallet_id, sorter_model, facility_zone, throughput_rate FROM \"{stream}\" WHERE facility_zone IN ('ZONE-1', 'ZONE-2') AND throughput_rate > 300.0 ORDER BY throughput_rate DESC LIMIT 10",
"category": "basic_select",
"expected": {
"columns": [
"pallet_id",
"sorter_model",
"facility_zone",
"throughput_rate"
],
"results": [
[
"PL-003",
"SORT-M3",
"ZONE-1",
"840.0"
],
[
"PL-007",
"SORT-M3",
"ZONE-1",
"555.0"
],
[
"PL-003",
"SORT-M3",
"ZONE-1",
"320.0"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1199000000,
"end_offset": 1363000000
}
},
{
"id": "Q022",
"sql": "SELECT * FROM \"{stream}\" WHERE operation_mode='auto' AND load_factor > 30.0 LIMIT 10",
"category": "basic_select",
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q022 warehouse event record 0 ACK batch batchIdList:Q022-0",
"stdout",
"PL-007",
"72.8",
"10.0",
"555.0",
"SORT-M3",
"LANE-B",
"ZONE-1",
"CC-DELTA",
"200",
"3.5",
"120",
"auto",
"100",
"3",
"5",
"22.0",
"BS-2026-A1",
"track TRK-ghi-jkl rerouted to ZONE-3",
"ACK batch batchIdList:BT-003-2026 confirmed",
"INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint",
"E007",
"@warehouse-Windows-sort-v1",
"UP-E001",
"ValidationException: item_count exceeds defect_limit bounds",
"{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}",
"[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]",
"[\"cid-yza567\",\"status-error\"]",
"MergeBatch",
"10.12.0.103",
"192.168.2.24",
"prod",
"low",
"dashboard",
"US-CENTRAL",
"Go-http-client/2.0 conveyor-monitor",
"UpdateBatch",
"site-mum-09",
"/api/v2/sorter/merge",
"PUT",
"200",
"inbound",
"pass",
"task-a1b2c3",
"ent-008-wh",
"security",
"overflow",
"allow",
"active",
"merge",
"/logs/warehouse/audit.log",
"3200",
"warehouse-south",
"false",
"v1.0.5",
"BIN-E5",
"1024",
"temp-regulator",
"rk-warehouse-006",
"tok-wh-mno345pqr678",
"warehouse-sync",
"variant_b",
"var1_pqr012",
"200",
"2100000",
"300000",
"0.12",
"Mobile",
"itemPage",
"interaction",
"vitalsInp",
"https://shop.example.com/",
"SSR",
"Android 14",
"File Inclusion",
"POST /admin/config",
"curl/7.88.1",
"/health",
"Acme Corp",
"UK",
"business",
"[\"torbot_ua_mismatch\"]",
"sess_003",
"None",
"true",
"ORD-004",
"None",
"updateItems",
"dc-east"
],
[
"Q022 warehouse event record 3 ACK batch batchIdList:Q022-3",
"stdout",
"PL-002",
"45.3",
"58.0",
"150.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"155",
"1.5",
"1000",
"auto",
"750",
"1",
"3",
"35.7",
"BS-2026-B2",
"track TRK-mno-pqr alignment corrected",
"ACK batch batchIdList:BT-006-2026 queued",
"INFO: batch sync completed, url=http://warehouse.local/sync",
"E010",
"@warehouse-Linux-scan-v3",
"UP-E004",
"NullPointerException at ConveyorController.handle()",
"{\"message\":{\"endpoint\":\"archiveLog\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"precheck\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"execute\\\",\\\"startTime\\\":\\\"50\\\"}\", \"{\\\"name\\\":\\\"finalize\\\",\\\"startTime\\\":\\\"300\\\"}\"]",
"[\"cid-def456\",\"status-pending\"]",
"RetryScan",
"10.12.1.201",
"192.168.1.12",
"prod",
"medium",
"scheduler",
"US-EAST",
"okhttp/4.12.0 (Android; sort-app)",
"RerouteTrack",
"site-lon-02",
"/api/v2/sorter/retry",
"POST",
"204",
"inbound",
"denied",
"task-j0k1l2",
"ent-001-wh",
"latency",
"timeout",
"block",
"active",
"sort",
"/config/zone/ZONE-1.yaml",
"15",
"warehouse-west",
"false",
"v1.0.0",
"BIN-H8",
"8192",
"conveyor-driver",
"rk-warehouse-009",
"tok-wh-efg123hij456",
"warehouse-track",
"variant_a",
"var3_stu678",
"500",
"1200000",
"250000",
"0.03",
"Computer",
"searchPage",
"interaction",
"vitalsCls",
"https://shop.example.com/item/1007",
"CSR",
"Mac OS X (iPhone)",
"SQL Injection (Param)",
"DELETE /api/session",
"PostmanRuntime/7.35",
"/swag/graphql",
"CloudServe GmbH",
"US",
"business",
"[\"scraping_pattern\",\"ip_hop\",\"rapid_login\"]",
"sess_004",
"suspicious",
"false",
"ORD-006",
"None",
"placeOrder",
"dc-east"
],
[
"Q023 warehouse event record 0 ACK batch batchIdList:Q023-0",
"stderr",
"PL-004",
"45.3",
"58.0",
"150.0",
"SORT-Q5",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"155",
"1.5",
"1000",
"auto",
"750",
"1",
"3",
"35.7",
"BS-2026-B2",
"track TRK-mno-pqr alignment corrected",
"ACK batch batchIdList:BT-006-2026 queued",
"INFO: batch sync completed, url=http://warehouse.local/sync",
"E010",
"@warehouse-Linux-scan-v3",
"None",
"NullPointerException at ConveyorController.handle()",
"{\"message\":{\"endpoint\":\"archiveLog\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"precheck\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"execute\\\",\\\"startTime\\\":\\\"50\\\"}\", \"{\\\"name\\\":\\\"finalize\\\",\\\"startTime\\\":\\\"300\\\"}\"]",
"[\"cid-def456\",\"status-pending\"]",
"RetryScan",
"10.12.1.201",
"192.168.1.12",
"prod",
"medium",
"scheduler",
"US-EAST",
"okhttp/4.12.0 (Android; sort-app)",
"RerouteTrack",
"site-lon-02",
"None",
"POST",
"204",
"inbound",
"denied",
"task-j0k1l2",
"ent-001-wh",
"latency",
"timeout",
"block",
"active",
"sort",
"None",
"15",
"warehouse-west",
"None",
"v1.0.0",
"BIN-H8",
"8192",
"conveyor-driver",
"rk-warehouse-009",
"tok-wh-efg123hij456",
"warehouse-track",
"None",
"var3_stu678",
"500",
"1200000",
"250000",
"0.03",
"Computer",
"searchPage",
"interaction",
"vitalsCls",
"None",
"CSR",
"Mac OS X (iPhone)",
"SQL Injection (Param)",
"DELETE /api/session",
"PostmanRuntime/7.35",
"/swag/graphql",
"CloudServe GmbH",
"US",
"business",
"[\"scraping_pattern\",\"ip_hop\",\"rapid_login\"]",
"sess_004",
"None",
"false",
"ORD-006",
"None",
"placeOrder",
"dc-east"
],
[
"Q023 warehouse event record 3 ACK batch batchIdList:Q023-3",
"stdout",
"PL-007",
"99.0",
"95.0",
"610.0",
"SORT-M3",
"LANE-B",
"ZONE-1",
"CC-DELTA",
"60",
"3.0",
"168",
"auto",
"350",
"1",
"1",
"28.9",
"BS-2026-A1",
"segment 42 scan completed with no defects",
"ACK batch batchIdList:BT-009-2026 retried",
"DEBUG: charge_remaining below threshold 15.0",
"E003",
"@warehouse-iOS-track-v3",
"None",
"ResourceExhaustedException: sorter_model SORT-M3 queue full",
"{\"message\":{\"endpoint\":\"searchItems\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"acquire\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"process\\\",\\\"startTime\\\":\\\"90\\\"}\", \"{\\\"name\\\":\\\"release\\\",\\\"startTime\\\":\\\"270\\\"}\"]",
"[\"cid-mno345\",\"status-retrying\"]",
"UpdateBatch",
"10.12.1.204",
"192.168.2.20",
"dev",
"high",
"api",
"EU-NORTH",
"Mozilla/5.0 WarehouseScanner/1.0",
"ArchiveLog",
"site-sfo-05",
"None",
"GET",
"500",
"internal",
"pass",
"task-s9t0u1",
"ent-004-wh",
"latency",
"jam",
"block",
"passive",
"scan",
"None",
"230",
"warehouse-central",
"None",
"v2.1.3",
"BIN-A1",
"32768",
"track-router",
"rk-warehouse-002",
"tok-wh-wxy901zab234",
"warehouse-sort",
"None",
"var1_yza234",
"502",
"3200000",
"80000",
"0.2",
"Computer",
"searchPage",
"performanceMetric",
"vitalsInp",
"None",
"CSR",
"iOS 18.1",
"CSRF Attempt",
"GET /api/users?id=1",
"Go-http-client/2.0",
"/api/v2/search",
"GlobalTech Inc",
"IN",
"business",
"[\"credential_stuffing\",\"rapid_login\"]",
"sess_001",
"None",
"true",
"ORD-001",
"None",
"createAccount",
"dc-west"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1259000000,
"end_offset": 1423000000
}
},
{
"id": "Q023",
"sql": "SELECT _timestamp, pallet_id, sorter_model, facility_zone, throughput_rate, load_factor, CASE WHEN load_factor >= 80.0 THEN 'critical' WHEN load_factor >= 50.0 THEN 'elevated' WHEN load_factor >= 20.0 THEN 'normal' ELSE 'idle' END AS load_tier, CASE WHEN cell_temp >= 30.0 THEN 'hot' WHEN cell_temp >= 22.0 THEN 'warm' ELSE 'cool' END AS temp_category FROM \"{stream}\" WHERE (facility_zone IN ('ZONE-1', 'ZONE-2', 'ZONE-3') AND operation_mode != 'manual') OR (charge_remaining < 50.0 AND scan_attempts >= 2) ORDER BY _timestamp DESC, load_factor DESC LIMIT 15",
"category": "basic_select",
"expected": {
"columns": [
"pallet_id",
"sorter_model",
"facility_zone",
"throughput_rate",
"load_factor",
"load_tier",
"temp_category"
],
"results": [
[
"PL-008",
"SORT-Z9",
"ZONE-2",
"190.0",
"88.1",
"critical",
"warm"
],
[
"PL-007",
"SORT-M3",
"ZONE-1",
"555.0",
"72.8",
"elevated",
"warm"
],
[
"PL-005",
"SORT-X1",
"ZONE-3",
"555.0",
"72.8",
"elevated",
"warm"
],
[
"PL-004",
"SORT-Q5",
"ZONE-2",
"290.0",
"55.2",
"elevated",
"cool"
],
[
"PL-003",
"SORT-M3",
"ZONE-1",
"840.0",
"33.0",
"normal",
"hot"
],
[
"PL-002",
"SORT-A7",
"ZONE-4",
"725.0",
"12.5",
"idle",
"hot"
],
[
"PL-008",
"SORT-Z9",
"ZONE-2",
"725.0",
"12.5",
"idle",
"hot"
],
[
"PL-001",
"SORT-X1",
"ZONE-3",
"610.0",
"99.0",
"critical",
"warm"
],
[
"PL-007",
"SORT-M3",
"ZONE-1",
"610.0",
"99.0",
"critical",
"warm"
],
[
"PL-004",
"SORT-Q5",
"ZONE-2",
"150.0",
"45.3",
"normal",
"hot"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1319000000,
"end_offset": 1483000000
}
},
{
"id": "Q024",
"sql": "SELECT DISTINCT sorter_model, operation_mode, facility_zone, build_signature FROM \"{stream}\" WHERE defect_limit BETWEEN 1.0 AND 3.0 AND runtime_hours NOT IN (24, 48, 72) AND package_size >= 300 ORDER BY sorter_model ASC, operation_mode ASC",
"category": "basic_select",
"expected": {
"columns": [
"sorter_model",
"operation_mode",
"facility_zone",
"build_signature"
],
"results": [
[
"SORT-A7",
"auto",
"ZONE-4",
"BS-2026-B2"
],
[
"SORT-M3",
"manual",
"ZONE-1",
"BS-2026-C3"
],
[
"SORT-M3",
"manual",
"ZONE-1",
"BS-2026-A1"
],
[
"SORT-Q5",
"auto",
"ZONE-2",
"BS-2026-B2"
],
[
"SORT-X1",
"hybrid",
"ZONE-3",
"BS-2026-A1"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1379000000,
"end_offset": 1543000000
}
},
{
"id": "Q025",
"sql": "SELECT _timestamp, pallet_id, conveyor_lane, load_factor, charge_remaining, ROUND((load_factor * charge_remaining) / 100.0, 2) AS utilization_index, ROUND(CAST(item_count AS FLOAT) / NULLIF(CAST(scan_attempts AS FLOAT), 0), 1) AS items_per_scan FROM \"{stream}\" WHERE load_factor IS NOT NULL AND charge_remaining IS NOT NULL AND item_count > 0 AND scan_attempts > 0 ORDER BY utilization_index DESC LIMIT 12",
"category": "basic_select",
"expected": {
"columns": [
"pallet_id",
"conveyor_lane",
"load_factor",
"charge_remaining",
"utilization_index",
"items_per_scan"
],
"results": [
[
"PL-007",
"LANE-B",
"99.0",
"95.0",
"94.05",
"60.0"
],
[
"PL-001",
"LANE-D",
"99.0",
"95.0",
"94.05",
"60.0"
],
[
"PL-005",
"LANE-D",
"67.9",
"75.3",
"51.13",
"205.0"
],
[
"PL-001",
"LANE-D",
"94.6",
"42.5",
"40.21",
"17.600000381469727"
],
[
"PL-003",
"LANE-B",
"94.6",
"42.5",
"40.21",
"17.600000381469727"
],
[
"PL-006",
"LANE-A",
"55.2",
"66.6",
"36.76",
"120.0"
],
[
"PL-002",
"LANE-A",
"45.3",
"58.0",
"26.27",
"155.0"
],
[
"PL-004",
"LANE-C",
"45.3",
"58.0",
"26.27",
"155.0"
],
[
"PL-008",
"LANE-C",
"88.1",
"25.0",
"22.03",
"170.0"
],
[
"PL-006",
"LANE-A",
"21.4",
"88.7",
"18.98",
"91.69999694824219"
],
[
"PL-008",
"LANE-C",
"21.4",
"88.7",
"18.98",
"91.69999694824219"
],
[
"PL-007",
"LANE-B",
"72.8",
"10.0",
"7.28",
"66.69999694824219"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1439000000,
"end_offset": 1603000000
}
},
{
"id": "Q026",
"sql": "SELECT _timestamp, log, control_center, operation_mode, cell_temp, CASE WHEN cell_temp >= 35.0 AND operation_mode = 'auto' THEN 'OVERTEMP-AUTO' WHEN cell_temp >= 35.0 THEN 'OVERTEMP' WHEN cell_temp >= 28.0 AND charge_remaining < 30.0 THEN 'WARNING-LOWCHARGE' WHEN cell_temp >= 28.0 THEN 'WARM' ELSE 'NORMAL' END AS alert_status FROM \"{stream}\" WHERE (cell_temp >= 28.0) OR (charge_remaining < 30.0 AND operation_mode != 'hybrid') ORDER BY cell_temp DESC, charge_remaining ASC LIMIT 20",
"category": "basic_select",
"expected": {
"columns": [
"log",
"control_center",
"operation_mode",
"cell_temp",
"alert_status"
],
"results": [
[
"Q027 warehouse event record 3 ACK batch batchIdList:Q027-3",
"CC-DELTA",
"manual",
"40.0",
"OVERTEMP"
],
[
"Q028 warehouse event record 0 ACK batch batchIdList:Q028-0",
"CC-BETA",
"manual",
"40.0",
"OVERTEMP"
],
[
"Q025 warehouse event record 4",
"CC-GAMMA",
"auto",
"35.7",
"OVERTEMP-AUTO"
],
[
"Q026 warehouse event record 1",
"CC-ALPHA",
"auto",
"35.7",
"OVERTEMP-AUTO"
],
[
"Q027 warehouse event record 2",
"CC-GAMMA",
"auto",
"32.5",
"WARNING-LOWCHARGE"
],
[
"Q026 warehouse event record 0 ACK batch batchIdList:Q026-0",
"CC-DELTA",
"manual",
"30.1",
"WARM"
],
[
"Q026 warehouse event record 4",
"CC-DELTA",
"auto",
"28.9",
"WARM"
],
[
"Q027 warehouse event record 1",
"CC-BETA",
"hybrid",
"28.9",
"WARM"
],
[
"Q028 warehouse event record 2",
"CC-DELTA",
"auto",
"22.0",
"NORMAL"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1499000000,
"end_offset": 1663000000
}
},
{
"id": "Q027",
"sql": "SELECT _timestamp, sorter_model, facility_zone, throughput_rate, load_factor, charge_remaining, ROUND(CAST(throughput_rate AS FLOAT) * (CAST(load_factor AS FLOAT) / 100.0) * (CAST(charge_remaining AS FLOAT) / 100.0), 2) AS effective_capacity FROM \"{stream}\" WHERE throughput_rate > 300.0 AND load_factor >= 30.0 AND facility_zone != 'ZONE-4' ORDER BY effective_capacity DESC, _timestamp ASC LIMIT 10",
"category": "basic_select",
"expected": {
"columns": [
"sorter_model",
"facility_zone",
"throughput_rate",
"load_factor",
"charge_remaining",
"effective_capacity"
],
"results": [
[
"SORT-M3",
"ZONE-1",
"610.0",
"99.0",
"95.0",
"573.7100219726562"
],
[
"SORT-X1",
"ZONE-3",
"610.0",
"99.0",
"95.0",
"573.7100219726562"
],
[
"SORT-X1",
"ZONE-3",
"900.0",
"94.6",
"42.5",
"361.8500061035156"
],
[
"SORT-M3",
"ZONE-1",
"900.0",
"94.6",
"42.5",
"361.8500061035156"
],
[
"SORT-M3",
"ZONE-1",
"840.0",
"33.0",
"33.3",
"92.30999755859375"
],
[
"SORT-X1",
"ZONE-3",
"840.0",
"33.0",
"33.3",
"92.30999755859375"
],
[
"SORT-M3",
"ZONE-1",
"555.0",
"72.8",
"10.0",
"40.400001525878906"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1559000000,
"end_offset": 1723000000
}
},
{
"id": "Q028",
"sql": "SELECT pallet_id, sorter_model, conveyor_lane, operation_mode, runtime_hours, ROUND(runtime_hours / 24.0, 1) AS runtime_days, CASE WHEN runtime_hours >= 500 THEN 'heavy' WHEN runtime_hours >= 168 THEN 'moderate' ELSE 'light' END AS usage_class FROM \"{stream}\" WHERE runtime_hours IS NOT NULL AND (sorter_model LIKE 'SORT-X%' OR sorter_model LIKE 'SORT-Z%' OR (sorter_model = 'SORT-Q5' AND runtime_hours < 200)) ORDER BY runtime_days DESC",
"category": "basic_select",
"expected": {
"columns": [
"pallet_id",
"sorter_model",
"conveyor_lane",
"operation_mode",
"runtime_hours",
"runtime_days",
"usage_class"
],
"results": [
[
"PL-005",
"SORT-X1",
"LANE-D",
"manual",
"720",
"30.0",
"heavy"
],
[
"PL-008",
"SORT-Z9",
"LANE-C",
"manual",
"500",
"20.8",
"heavy"
],
[
"PL-001",
"SORT-X1",
"LANE-D",
"hybrid",
"168",
"7.0",
"moderate"
],
[
"PL-001",
"SORT-X1",
"LANE-D",
"hybrid",
"90",
"3.8",
"light"
],
[
"PL-008",
"SORT-Z9",
"LANE-C",
"manual",
"72",
"3.0",
"light"
],
[
"PL-004",
"SORT-Q5",
"LANE-C",
"auto",
"48",
"2.0",
"light"
],
[
"PL-005",
"SORT-X1",
"LANE-D",
"manual",
"24",
"1.0",
"light"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1619000000,
"end_offset": 1783000000
}
},
{
"id": "Q029",
"sql": "SELECT _timestamp, control_center, facility_zone, cell_temp, COALESCE(CAST(conveyor_segment AS VARCHAR), 'N/A') AS segment_label, COALESCE(CAST(defect_limit AS VARCHAR), '0.0') AS defect_str FROM \"{stream}\" WHERE facility_zone IN (SELECT DISTINCT facility_zone FROM \"{stream}\" WHERE cell_temp > 25.0) ORDER BY cell_temp DESC LIMIT 15",
"category": "basic_select",
"expected": {
"columns": [
"control_center",
"facility_zone",
"cell_temp",
"segment_label",
"defect_str"
],
"results": [
[
"CC-BETA",
"ZONE-3",
"40.0",
"3",
"1.2"
],
[
"CC-DELTA",
"ZONE-1",
"40.0",
"3",
"1.2"
],
[
"CC-ALPHA",
"ZONE-2",
"35.7",
"3",
"1.5"
],
[
"CC-ALPHA",
"ZONE-2",
"32.5",
"2",
"0.8"
],
[
"CC-GAMMA",
"ZONE-4",
"32.5",
"2",
"0.8"
],
[
"CC-BETA",
"ZONE-3",
"30.1",
"2",
"1.0"
],
[
"CC-DELTA",
"ZONE-1",
"30.1",
"2",
"1.0"
],
[
"CC-BETA",
"ZONE-3",
"28.9",
"1",
"3.0"
],
[
"CC-GAMMA",
"ZONE-4",
"26.3",
"1",
"0.5"
],
[
"CC-GAMMA",
"ZONE-4",
"24.8",
"5",
"2.5"
],
[
"CC-ALPHA",
"ZONE-2",
"24.8",
"5",
"2.5"
],
[
"CC-BETA",
"ZONE-3",
"19.2",
"4",
"2.0"
],
[
"CC-DELTA",
"ZONE-1",
"19.2",
"4",
"2.0"
],
[
"CC-GAMMA",
"ZONE-4",
"18.5",
"4",
"2.8"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1679000000,
"end_offset": 1843000000
}
},
{
"id": "Q030",
"sql": "SELECT _timestamp, build_signature, operation_mode, item_count, package_size, ROUND(CAST(item_count AS FLOAT) * CAST(package_size AS FLOAT) / 1000.0, 2) AS total_weight_kg, CASE WHEN item_count * package_size >= 300000 THEN 'XL' WHEN item_count * package_size >= 100000 THEN 'LG' WHEN item_count * package_size >= 30000 THEN 'MD' ELSE 'SM' END AS shipment_tier FROM \"{stream}\" WHERE item_count > 0 AND package_size > 0 ORDER BY total_weight_kg DESC LIMIT 15",
"category": "basic_select",
"expected": {
"columns": [
"build_signature",
"operation_mode",
"item_count",
"package_size",
"total_weight_kg",
"shipment_tier"
],
"results": [
[
"BS-2026-C3",
"auto",
"410",
"1000",
"410.0",
"XL"
],
[
"BS-2026-B2",
"auto",
"500",
"600",
"300.0",
"XL"
],
[
"BS-2026-B2",
"auto",
"500",
"600",
"300.0",
"XL"
],
[
"BS-2025-D4",
"hybrid",
"120",
"1200",
"144.0",
"LG"
],
[
"BS-2026-B2",
"manual",
"340",
"250",
"85.0",
"MD"
],
[
"BS-2026-B2",
"auto",
"340",
"250",
"85.0",
"MD"
],
[
"BS-2025-D4",
"hybrid",
"275",
"200",
"55.0",
"MD"
],
[
"BS-2025-D4",
"manual",
"275",
"200",
"55.0",
"MD"
],
[
"BS-2026-A1",
"manual",
"88",
"500",
"44.0",
"MD"
],
[
"BS-2026-C3",
"manual",
"50",
"850",
"42.5",
"MD"
],
[
"BS-2026-C3",
"manual",
"50",
"850",
"42.5",
"MD"
],
[
"BS-2026-A1",
"hybrid",
"60",
"350",
"21.0",
"SM"
],
[
"BS-2026-A1",
"auto",
"200",
"100",
"20.0",
"SM"
],
[
"BS-2026-A1",
"hybrid",
"200",
"100",
"20.0",
"SM"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1739000000,
"end_offset": 1903000000
}
},
{
"id": "Q031",
"sql": "SELECT _timestamp, pallet_id, sorter_model, scan_attempts, retry_flag, CASE WHEN scan_attempts >= 3 THEN TRUE ELSE FALSE END AS retry_flag_derived FROM (SELECT _timestamp, pallet_id, sorter_model, scan_attempts, scan_attempts >= 3 AS retry_flag FROM \"{stream}\") sub WHERE retry_flag = TRUE ORDER BY scan_attempts DESC",
"category": "basic_select",
"expected": {
"columns": [
"pallet_id",
"sorter_model",
"scan_attempts",
"retry_flag",
"retry_flag_derived"
],
"results": [
[
"PL-003",
"SORT-M3",
"5",
"True",
"True"
],
[
"PL-003",
"SORT-M3",
"4",
"True",
"True"
],
[
"PL-005",
"SORT-X1",
"4",
"True",
"True"
],
[
"PL-007",
"SORT-M3",
"3",
"True",
"True"
],
[
"PL-001",
"SORT-X1",
"3",
"True",
"True"
],
[
"PL-008",
"SORT-Z9",
"3",
"True",
"True"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1799000000,
"end_offset": 1963000000
}
},
{
"id": "Q032",
"sql": "SELECT _timestamp, conveyor_lane, facility_zone, cell_temp, ambient_deviation FROM (SELECT _timestamp, conveyor_lane, facility_zone, cell_temp, ROUND(cell_temp - (SELECT AVG(cell_temp) FROM \"{stream}\" t2 WHERE t2.facility_zone = t1.facility_zone), 2) AS ambient_deviation FROM \"{stream}\" t1 WHERE cell_temp IS NOT NULL) derived WHERE ABS(ambient_deviation) > 3.0 ORDER BY ABS(ambient_deviation) DESC LIMIT 12",
"category": "basic_select",
"expected": {
"columns": [
"conveyor_lane",
"facility_zone",
"cell_temp",
"ambient_deviation"
],
"results": [
[
"LANE-D",
"ZONE-3",
"40.0",
"12.48"
],
[
"LANE-D",
"ZONE-3",
"19.2",
"-8.32"
],
[
"LANE-B",
"ZONE-1",
"19.2",
"-6.87"
],
[
"LANE-C",
"ZONE-2",
"35.7",
"5.88"
],
[
"LANE-D",
"ZONE-3",
"22.0",
"-5.52"
],
[
"LANE-A",
"ZONE-4",
"26.3",
"-5.2"
],
[
"LANE-C",
"ZONE-2",
"24.8",
"-5.02"
],
[
"LANE-A",
"ZONE-4",
"35.7",
"4.2"
],
[
"LANE-B",
"ZONE-1",
"30.1",
"4.03"
],
[
"LANE-C",
"ZONE-2",
"26.3",
"-3.52"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1859000000,
"end_offset": 2023000000
}
},
{
"id": "Q033",
"sql": "SELECT _timestamp, operation_mode, conveyor_lane, load_factor, charge_remaining, ROUND((load_factor + (100.0 - charge_remaining)) / 2.0, 2) AS stress_index, CASE WHEN load_factor > 70.0 AND charge_remaining < 30.0 THEN 'OVERLOADED' WHEN load_factor > 70.0 THEN 'HIGH_LOAD' WHEN charge_remaining < 30.0 THEN 'LOW_CHARGE' ELSE 'STABLE' END AS health_status FROM \"{stream}\" ORDER BY stress_index DESC, _timestamp ASC LIMIT 15",
"category": "basic_select",
"expected": {
"columns": [
"operation_mode",
"conveyor_lane",
"load_factor",
"charge_remaining",
"stress_index",
"health_status"
],
"results": [
[
"auto",
"LANE-A",
"88.1",
"25.0",
"81.55",
"OVERLOADED"
],
[
"auto",
"LANE-B",
"72.8",
"10.0",
"81.4",
"OVERLOADED"
],
[
"hybrid",
"LANE-D",
"72.8",
"10.0",
"81.4",
"OVERLOADED"
],
[
"auto",
"LANE-A",
"12.5",
"5.0",
"53.75",
"LOW_CHARGE"
],
[
"auto",
"LANE-C",
"12.5",
"5.0",
"53.75",
"LOW_CHARGE"
],
[
"hybrid",
"LANE-D",
"99.0",
"95.0",
"52.0",
"HIGH_LOAD"
],
[
"manual",
"LANE-B",
"99.0",
"95.0",
"52.0",
"HIGH_LOAD"
],
[
"manual",
"LANE-D",
"33.0",
"33.3",
"49.85",
"STABLE"
],
[
"manual",
"LANE-D",
"67.9",
"75.3",
"46.3",
"STABLE"
],
[
"auto",
"LANE-B",
"67.9",
"75.3",
"46.3",
"STABLE"
],
[
"hybrid",
"LANE-A",
"55.2",
"66.6",
"44.3",
"STABLE"
],
[
"manual",
"LANE-C",
"55.2",
"66.6",
"44.3",
"STABLE"
],
[
"hybrid",
"LANE-A",
"45.3",
"58.0",
"43.65",
"STABLE"
],
[
"manual",
"LANE-C",
"21.4",
"88.7",
"16.35",
"STABLE"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1919000000,
"end_offset": 2083000000
}
},
{
"id": "Q034",
"sql": "SELECT DISTINCT ON (facility_zone) facility_zone, _timestamp, sorter_model, throughput_rate, load_factor FROM \"{stream}\" WHERE throughput_rate IS NOT NULL ORDER BY facility_zone ASC, throughput_rate DESC",
"category": "basic_select",
"expected": {
"columns": [
"facility_zone",
"sorter_model",
"throughput_rate",
"load_factor"
],
"results": [
[
"ZONE-1",
"SORT-M3",
"900.0",
"94.6"
],
[
"ZONE-2",
"SORT-Q5",
"725.0",
"12.5"
],
[
"ZONE-3",
"SORT-X1",
"900.0",
"94.6"
],
[
"ZONE-4",
"SORT-A7",
"725.0",
"12.5"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 1979000000,
"end_offset": 2143000000
}
},
{
"id": "Q035",
"sql": "SELECT _timestamp, log, facility_zone, stream FROM \"{stream}\" WHERE stream = 'stdout' ORDER BY _timestamp DESC LIMIT 15",
"category": "basic_select",
"expected": {
"columns": [
"log",
"facility_zone",
"stream"
],
"results": [
[
"Q037 warehouse event record 1",
"ZONE-1",
"stdout"
],
[
"Q036 warehouse event record 4",
"ZONE-3",
"stdout"
],
[
"Q037 warehouse event record 0 ACK batch batchIdList:Q037-0",
"ZONE-4",
"stdout"
],
[
"Q036 warehouse event record 2",
"ZONE-1",
"stdout"
],
[
"Q036 warehouse event record 1",
"ZONE-4",
"stdout"
],
[
"Q036 warehouse event record 0 ACK batch batchIdList:Q036-0",
"ZONE-3",
"stdout"
],
[
"Q035 warehouse event record 3 ACK batch batchIdList:Q035-3",
"ZONE-1",
"stdout"
],
[
"Q035 warehouse event record 2",
"ZONE-4",
"stdout"
],
[
"Q035 warehouse event record 1",
"ZONE-3",
"stdout"
],
[
"Q034 warehouse event record 4",
"ZONE-1",
"stdout"
]
],
"results_mode": "rowsort"
},
"time_offset": {
"start_offset": 2039000000,
"end_offset": 2203000000
}
},
{
"id": "Q169",
"sql": "SELECT risk_rules_list, COUNT(*) AS cnt FROM \"{stream}\" WHERE risk_rules_list IS NOT NULL AND TRIM(CAST(risk_rules_list AS VARCHAR)) <> '' AND page_slug = 'itemPage' GROUP BY risk_rules_list ORDER BY cnt DESC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 10079000000,
"end_offset": 10243000000
},
"expected": {
"columns": [
"risk_rules_list",
"cnt"
],
"results": [
[
"[\"torbot_ua_mismatch\",\"cookie_reuse\"]",
"2"
],
[
"[\"scraping_pattern\",\"high_freq\"]",
"2"
],
[
"[\"credential_stuffing\"]",
"2"
],
[
"[\"rate_limit_exceeded\",\"geo_anomaly\"]",
"2"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q178",
"sql": "SELECT _timestamp, log, facility_zone, operation_mode,\n throughput_rate, load_factor, charge_remaining, cell_temp,\n item_count, defect_limit, package_size\nFROM \"{stream}\"\nWHERE (facility_zone = 'ZONE-1' OR facility_zone = 'ZONE-2')\n AND (operation_mode IN ('auto', 'manual') OR (operation_mode = 'hybrid' AND load_factor > 50.0))\n AND throughput_rate > 100.0\n AND charge_remaining IS NOT NULL\n AND ((cell_temp >= 20.0 AND cell_temp <= 35.0) OR operation_mode = 'manual')\n AND defect_limit < 3.0\nORDER BY _timestamp DESC, throughput_rate DESC\nLIMIT 15",
"category": "basic_select",
"time_offset": {
"start_offset": 10619000000,
"end_offset": 10783000000
},
"expected": {
"columns": [
"log",
"facility_zone",
"operation_mode",
"throughput_rate",
"load_factor",
"charge_remaining",
"cell_temp",
"item_count",
"defect_limit",
"package_size"
],
"results": [
[
"Q179 warehouse event record 4",
"ZONE-2",
"auto",
"480.0",
"21.4",
"88.7",
"24.8",
"275",
"2.5",
"200"
],
[
"Q179 warehouse event record 3 ACK batch batchIdList:Q179-3",
"ZONE-1",
"manual",
"320.0",
"67.9",
"75.3",
"19.2",
"410",
"2.0",
"1000"
],
[
"Q178 warehouse event record 4",
"ZONE-1",
"auto",
"900.0",
"94.6",
"42.5",
"30.1",
"88",
"1.0",
"500"
],
[
"Q179 warehouse event record 0 ACK batch batchIdList:Q179-0",
"ZONE-2",
"manual",
"190.0",
"88.1",
"25.0",
"26.3",
"340",
"0.5",
"250"
],
[
"Q178 warehouse event record 0 ACK batch batchIdList:Q178-0",
"ZONE-1",
"manual",
"840.0",
"33.0",
"33.3",
"40.0",
"50",
"1.2",
"850"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q179",
"sql": "SELECT _timestamp, facility_zone, load_factor, throughput_rate,\n CASE\n WHEN load_factor >= 80.0 AND cell_temp >= 30.0 THEN 'CRITICAL'\n WHEN load_factor >= 50.0 AND cell_temp >= 25.0 THEN 'WARNING'\n WHEN load_factor >= 20.0 THEN 'NORMAL'\n WHEN charge_remaining < 20.0 THEN 'LOW_CHARGE'\n ELSE 'IDLE'\n END AS status_level,\n CASE\n WHEN throughput_rate >= 500.0 THEN 'HIGH'\n WHEN throughput_rate >= 200.0 THEN 'MEDIUM'\n ELSE 'LOW'\n END AS throughput_tier\nFROM \"{stream}\"\nWHERE facility_zone != 'ZONE-4'\nORDER BY load_factor DESC, _timestamp DESC\nLIMIT 20",
"category": "basic_select",
"time_offset": {
"start_offset": 10679000000,
"end_offset": 10843000000
},
"expected": {
"columns": [
"facility_zone",
"load_factor",
"throughput_rate",
"status_level",
"throughput_tier"
],
"results": [
[
"ZONE-1",
"99.0",
"610.0",
"WARNING",
"HIGH"
],
[
"ZONE-3",
"94.6",
"900.0",
"CRITICAL",
"HIGH"
],
[
"ZONE-1",
"94.6",
"900.0",
"CRITICAL",
"HIGH"
],
[
"ZONE-2",
"88.1",
"190.0",
"WARNING",
"LOW"
],
[
"ZONE-3",
"67.9",
"320.0",
"NORMAL",
"MEDIUM"
],
[
"ZONE-1",
"67.9",
"320.0",
"NORMAL",
"MEDIUM"
],
[
"ZONE-2",
"55.2",
"290.0",
"NORMAL",
"MEDIUM"
],
[
"ZONE-1",
"33.0",
"840.0",
"NORMAL",
"HIGH"
],
[
"ZONE-3",
"33.0",
"840.0",
"NORMAL",
"HIGH"
],
[
"ZONE-2",
"21.4",
"480.0",
"NORMAL",
"MEDIUM"
],
[
"ZONE-2",
"12.5",
"725.0",
"LOW_CHARGE",
"HIGH"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q226",
"sql": "SELECT _timestamp, concat(action_category, ' - ', action_subcategory, ' - ', error_code, ' : ', exception_message) AS display_msg FROM \"{stream}\" WHERE org_name = 'warehouse-east'",
"category": "basic_select",
"time_offset": {
"start_offset": 13499000000,
"end_offset": 13573000000
},
"expected": {
"columns": [
"display_msg"
],
"results": [
[
"performanceMetric - vitalsInp - E009 : OverflowException: throughput_rate 999.0 exceeds max capacity"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q227",
"sql": "SELECT _timestamp, coalesce(page_url, page_slug) AS effective_page, coalesce(exception_message, error_code) AS issue_desc, concat(coalesce(endpoint_path, resource_path), '?via=', http_method) AS full_path FROM \"{stream}\" WHERE action_category = 'navigation'",
"category": "basic_select",
"time_offset": {
"start_offset": 13559000000,
"end_offset": 13633000000
},
"expected": {
"columns": [
"effective_page",
"issue_desc",
"full_path"
],
"results": [
[
"https://shop.example.com/item/1002",
"DataIntegrityException: pallet_id PL-002 checksum mismatch",
"/api/v1/warehouse/search?via=DELETE"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q228",
"sql": "SELECT * FROM \"{stream}\" WHERE exception_message LIKE '%Exception%' OR upstream_error_code LIKE '%UP-E00%' OR error_code LIKE '%E00%' OR event_detail LIKE '%fail%' OR log_message LIKE '%ERROR%'",
"category": "basic_select",
"time_offset": {
"start_offset": 13619000000,
"end_offset": 13693000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q227 warehouse event record 4",
"stderr",
"PL-004",
"55.2",
"66.6",
"290.0",
"SORT-Q5",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"120",
"2.8",
"48",
"auto",
"1200",
"1",
"4",
"18.5",
"BS-2025-D4",
"segment 17 weight threshold exceeded",
"ACK batch batchIdList:BT-002-2026 acknowledged",
"ERROR: scan_attempts exhausted for pallet_id=PL-007",
"E006",
"@warehouse-Linux-sort-v3",
"None",
"NetworkException: connection to batch sync failed",
"{\"message\":{\"endpoint\":\"scanPallet\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"process\\\",\\\"startTime\\\":\\\"150\\\"}\"]",
"[\"cid-vwx234\",\"status-ok\"]",
"RerouteTrack",
"10.12.0.102",
"192.168.2.23",
"dev",
"medium",
"cli",
"SA-EAST",
"Java/17.0.8 (OpenJDK; sorter-agent)",
"SearchItems",
"site-sin-08",
"None",
"POST",
"403",
"internal",
"denied",
"task-b8c9d0",
"ent-007-wh",
"latency",
"timeout",
"allow",
"passive",
"sort",
"None",
"567",
"warehouse-north",
"None",
"v3.1.0",
"BIN-D4",
"512",
"lane-monitor",
"rk-warehouse-005",
"tok-wh-ghi789jkl012",
"warehouse-merge",
"None",
"ctl_xyz789",
"200",
"2800000",
"95000",
"0.05",
"Computer",
"checkoutPage",
"performanceMetric",
"vitalsLcp",
"None",
"SSR",
"Android 14",
"XSS Stored (Body)",
"GET /favicon.ico",
"Mozilla/5.0 Chrome/120",
"/api/v1/users",
"CloudServe GmbH",
"DE",
"hosting",
"[\"rate_limit_exceeded\"]",
"sess_002",
"None",
"false",
"ORD-003",
"None",
"placeOrder",
"dc-west"
],
[
"Q228 warehouse event record 0 ACK batch batchIdList:Q228-0",
"stdout",
"PL-005",
"33.0",
"33.3",
"840.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"50",
"1.2",
"720",
"manual",
"850",
"4",
"3",
"40.0",
"BS-2026-C3",
"batch XYZ789 timed out at checkpoint 3",
"ACK batch batchIdList:BT-001-2026 received",
"WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9",
"E005",
"@warehouse-iOS-sort-v2",
"None",
"ConfigurationException: missing facility_zone ZONE-3 override",
"{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}",
"[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]",
"[\"cid-stu901\",\"status-warning\"]",
"ScanPallet",
"10.12.0.101",
"192.168.2.22",
"staging",
"high",
"dashboard",
"AP-EAST",
"Python-urllib/3.11 warehouse-client",
"SyncZone",
"site-dub-07",
"None",
"GET",
"401",
"outbound",
"fail",
"task-y5z6a7",
"ent-006-wh",
"capacity",
"overflow",
"block",
"active",
"scan",
"None",
"89",
"warehouse-west",
"None",
"v3.0.1",
"BIN-C3",
"128",
"pallet-mapper",
"rk-warehouse-004",
"tok-wh-abc123def456",
"warehouse-track",
"None",
"sess_def456",
"403",
"1500000",
"200000",
"0.06",
"Tablet",
"itemPage",
"performanceMetric",
"pageView",
"None",
"CSR",
"Mac OS X (iPhone)",
"Command Injection",
"GET /search?q=test",
"Mozilla/5.0 Edge/120",
"/swag/graphql",
"FastHost Ltd",
"US",
"business",
"[\"scraping_pattern\",\"high_freq\"]",
"sess_001",
"None",
"false",
"ORD-001",
"None",
"getInventory",
"dc-central"
],
[
"Q228 warehouse event record 1",
"stdout",
"PL-006",
"55.2",
"66.6",
"290.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"120",
"2.8",
"48",
"hybrid",
"1200",
"1",
"4",
"18.5",
"BS-2025-D4",
"segment 17 weight threshold exceeded",
"ACK batch batchIdList:BT-002-2026 acknowledged",
"ERROR: scan_attempts exhausted for pallet_id=PL-007",
"E006",
"@warehouse-Linux-sort-v3",
"UP-E010",
"NetworkException: connection to batch sync failed",
"{\"message\":{\"endpoint\":\"scanPallet\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"process\\\",\\\"startTime\\\":\\\"150\\\"}\"]",
"[\"cid-vwx234\",\"status-ok\"]",
"RerouteTrack",
"10.12.0.102",
"192.168.2.23",
"dev",
"medium",
"cli",
"SA-EAST",
"Java/17.0.8 (OpenJDK; sorter-agent)",
"SearchItems",
"site-sin-08",
"/api/v2/sorter/reroute",
"POST",
"403",
"internal",
"denied",
"task-b8c9d0",
"ent-007-wh",
"latency",
"timeout",
"allow",
"passive",
"sort",
"/config/zone/ZONE-3.yaml",
"567",
"warehouse-north",
"true",
"v3.1.0",
"BIN-D4",
"512",
"lane-monitor",
"rk-warehouse-005",
"tok-wh-ghi789jkl012",
"warehouse-merge",
"variant_a",
"ctl_xyz789",
"200",
"2800000",
"95000",
"0.05",
"Computer",
"checkoutPage",
"performanceMetric",
"vitalsLcp",
"https://shop.example.com/item/1004",
"SSR",
"Android 14",
"XSS Stored (Body)",
"GET /favicon.ico",
"Mozilla/5.0 Chrome/120",
"/api/v1/users",
"CloudServe GmbH",
"DE",
"hosting",
"[\"rate_limit_exceeded\"]",
"sess_002",
"None",
"false",
"ORD-003",
"None",
"placeOrder",
"dc-west"
],
[
"Q228 warehouse event record 2",
"stdout",
"PL-007",
"72.8",
"10.0",
"555.0",
"SORT-M3",
"LANE-B",
"ZONE-1",
"CC-DELTA",
"200",
"3.5",
"120",
"auto",
"100",
"3",
"5",
"22.0",
"BS-2026-A1",
"track TRK-ghi-jkl rerouted to ZONE-3",
"ACK batch batchIdList:BT-003-2026 confirmed",
"INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint",
"E007",
"@warehouse-Windows-sort-v1",
"UP-E001",
"ValidationException: item_count exceeds defect_limit bounds",
"{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}",
"[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]",
"[\"cid-yza567\",\"status-error\"]",
"MergeBatch",
"10.12.0.103",
"192.168.2.24",
"prod",
"low",
"dashboard",
"US-CENTRAL",
"Go-http-client/2.0 conveyor-monitor",
"UpdateBatch",
"site-mum-09",
"/api/v2/sorter/merge",
"PUT",
"200",
"inbound",
"pass",
"task-a1b2c3",
"ent-008-wh",
"security",
"overflow",
"allow",
"active",
"merge",
"/logs/warehouse/audit.log",
"3200",
"warehouse-south",
"false",
"v1.0.5",
"BIN-E5",
"1024",
"temp-regulator",
"rk-warehouse-006",
"tok-wh-mno345pqr678",
"warehouse-sync",
"variant_b",
"var1_pqr012",
"200",
"2100000",
"300000",
"0.12",
"Mobile",
"itemPage",
"interaction",
"vitalsInp",
"https://shop.example.com/",
"SSR",
"Android 14",
"File Inclusion",
"POST /admin/config",
"curl/7.88.1",
"/health",
"Acme Corp",
"UK",
"business",
"[\"torbot_ua_mismatch\"]",
"sess_003",
"None",
"true",
"ORD-004",
"None",
"updateItems",
"dc-east"
],
[
"Q228 warehouse event record 3 ACK batch batchIdList:Q228-3",
"stderr",
"PL-008",
"88.1",
"25.0",
"190.0",
"SORT-Z9",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"340",
"0.5",
"500",
"manual",
"250",
"2",
"1",
"26.3",
"BS-2026-B2",
"batch MNO456 merged into pallet PL-005",
"ACK batch batchIdList:BT-004-2026 validated",
"GET /api/v1/warehouse/status 200 OK",
"E008",
"@warehouse-Android-scan-v2",
"None",
"StateTransitionException: operation_mode hybrid invalid state",
"{\"message\":{\"endpoint\":\"mergeBatch\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"boot\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"calibrate\\\",\\\"startTime\\\":\\\"100\\\"}\"]",
"[\"cid-bcd890\",\"status-ok\"]",
"CheckThreshold",
"10.12.0.104",
"192.168.1.10",
"staging",
"critical",
"cli",
"EU-CENTRAL",
"PostmanRuntime/7.35.0",
"DeleteRecord",
"site-tor-10",
"None",
"DELETE",
"200",
"outbound",
"pass",
"task-d4e5f6",
"ent-009-wh",
"error",
"mismatch",
"block",
"passive",
"track",
"None",
"78",
"warehouse-central",
"None",
"v2.0.8",
"BIN-F6",
"2048",
"charge-checker",
"rk-warehouse-007",
"tok-wh-stu901vwx234",
"warehouse-sort",
"None",
"var2_mno345",
"200",
"3400000",
"120000",
"0.08",
"Computer",
"homePage",
"navigation",
"vitalsLcp",
"None",
"CSR",
"iOS 17.4",
"Desync Attack",
"GET /api/products",
"python-requests/2.31",
"/ip/10.0.0.1",
"NetGuard AS",
"US",
"business",
"[\"cookie_reuse\",\"session_hijack\"]",
"sess_002",
"None",
"false",
"ORD-005",
"None",
"verifyPayment",
"dc-central"
],
[
"Q228 warehouse event record 4",
"stdout",
"PL-001",
"94.6",
"42.5",
"900.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"88",
"1.0",
"90",
"hybrid",
"500",
"5",
"2",
"30.1",
"BS-2026-A1",
"segment 88 speed anomaly detected",
"ACK batch batchIdList:BT-005-2026 processed",
"POST /api/v2/sorter/scan 201 Created",
"E009",
"@warehouse-iOS-scan-v1",
"UP-E003",
"OverflowException: throughput_rate 999.0 exceeds max capacity",
"{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}",
"[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]",
"[\"cid-abc123\",\"status-ok\"]",
"ArchiveLog",
"10.12.0.105",
"192.168.1.11",
"dev",
"high",
"api",
"AP-CENTRAL",
"axios/1.6.0 (Node.js; warehouse-ui)",
"ScanPallet",
"site-nyc-01",
"/api/v1/archive/log",
"GET",
"201",
"internal",
"fail",
"task-g7h8i9",
"ent-010-wh",
"capacity",
"jam",
"allow",
"disabled",
"scan",
"/data/sorter/output.dat",
"1900",
"warehouse-east",
"false",
"v3.2.0",
"BIN-G7",
"4096",
"sorter-engine",
"rk-warehouse-008",
"tok-wh-yza567bcd890",
"warehouse-scan",
"control",
"sess_abc123",
"200",
"1100000",
"180000",
"0.25",
"Mobile",
"itemPage",
"performanceMetric",
"vitalsInp",
"https://shop.example.com/item/1006",
"SSR",
"Android 13",
"Evasion Technique",
"PUT /api/cart/update",
"Mozilla/5.0 Firefox/121",
"/api/v1/data",
"HostPro Inc",
"BR",
"hosting",
"[\"credential_stuffing\"]",
"sess_001",
"None",
"false",
"ORD-003",
"None",
"updateItems",
"dc-west"
],
[
"Q229 warehouse event record 0 ACK batch batchIdList:Q229-0",
"stdout",
"PL-002",
"88.1",
"25.0",
"190.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"340",
"0.5",
"500",
"auto",
"250",
"2",
"1",
"26.3",
"BS-2026-B2",
"batch MNO456 merged into pallet PL-005",
"ACK batch batchIdList:BT-004-2026 validated",
"GET /api/v1/warehouse/status 200 OK",
"E008",
"@warehouse-Android-scan-v2",
"UP-E002",
"StateTransitionException: operation_mode hybrid invalid state",
"{\"message\":{\"endpoint\":\"mergeBatch\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"boot\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"calibrate\\\",\\\"startTime\\\":\\\"100\\\"}\"]",
"[\"cid-bcd890\",\"status-ok\"]",
"CheckThreshold",
"10.12.0.104",
"192.168.1.10",
"staging",
"critical",
"cli",
"EU-CENTRAL",
"PostmanRuntime/7.35.0",
"DeleteRecord",
"site-tor-10",
"/api/v1/health/check",
"DELETE",
"200",
"outbound",
"pass",
"task-d4e5f6",
"ent-009-wh",
"error",
"mismatch",
"block",
"passive",
"track",
"/logs/warehouse/app.log",
"78",
"warehouse-central",
"true",
"v2.0.8",
"BIN-F6",
"2048",
"charge-checker",
"rk-warehouse-007",
"tok-wh-stu901vwx234",
"warehouse-sort",
"variant_c",
"var2_mno345",
"200",
"3400000",
"120000",
"0.08",
"Computer",
"homePage",
"navigation",
"vitalsLcp",
"https://shop.example.com/item/1005",
"CSR",
"iOS 17.4",
"Desync Attack",
"GET /api/products",
"python-requests/2.31",
"/ip/10.0.0.1",
"NetGuard AS",
"US",
"business",
"[\"cookie_reuse\",\"session_hijack\"]",
"sess_002",
"None",
"false",
"ORD-005",
"Allowlisted",
"verifyPayment",
"dc-central"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q229",
"sql": "SELECT visitor_session_id, action_category, exception_message, page_slug FROM \"{stream}\" WHERE org_name IN ('warehouse-east', 'warehouse-north', 'warehouse-central') AND build_version IS NOT NULL AND exception_message NOT LIKE '%Timeout%' AND exception_message NOT LIKE '%NullPointer%' AND error_code NOT IN ('E001', 'E002') AND device_type IN ('Mobile', 'Computer')",
"category": "basic_select",
"time_offset": {
"start_offset": 13679000000,
"end_offset": 13753000000
},
"expected": {
"columns": [
"visitor_session_id",
"action_category",
"exception_message",
"page_slug"
],
"results": [
[
"sess_001",
"performanceMetric",
"OverflowException: throughput_rate 999.0 exceeds max capacity",
"itemPage"
],
[
"sess_002",
"navigation",
"StateTransitionException: operation_mode hybrid invalid state",
"homePage"
],
[
"sess_001",
"performanceMetric",
"OverflowException: throughput_rate 999.0 exceeds max capacity",
"itemPage"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q230",
"sql": "SELECT * FROM \"{stream}\" WHERE action_category = 'navigation' AND page_slug IN ('itemPage', 'cartPage', 'checkoutPage', 'searchPage', 'itemPage') AND device_type IN ('Mobile', 'Computer')",
"category": "basic_select",
"time_offset": {
"start_offset": 13739000000,
"end_offset": 13813000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q229 warehouse event record 4",
"stdout",
"PL-006",
"21.4",
"88.7",
"480.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"275",
"2.5",
"72",
"hybrid",
"200",
"3",
"5",
"24.8",
"BS-2025-D4",
"batch ABC123 processed successfully",
"ACK batch batchIdList:BT-008-2026 archived",
"ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry",
"E002",
"@warehouse-Android-track-v1",
"None",
"DataIntegrityException: pallet_id PL-002 checksum mismatch",
"{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}",
"[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]",
"[\"cid-jkl012\",\"status-ok\"]",
"SearchItems",
"10.12.1.203",
"192.168.1.14",
"staging",
"critical",
"cli",
"EU-WEST",
"node-fetch/3.3.2 (tracking-service)",
"CheckThreshold",
"site-syd-04",
"None",
"DELETE",
"404",
"outbound",
"fail",
"task-p6q7r8",
"ent-003-wh",
"capacity",
"mismatch",
"allow",
"active",
"track",
"None",
"45",
"warehouse-south",
"None",
"v2.0.0",
"BIN-J0",
"256",
"scan-hub",
"rk-warehouse-001",
"tok-wh-qrs345tuv678",
"warehouse-sync",
"None",
"sess_def456",
"200",
"1800000",
"160000",
"0.1",
"Mobile",
"itemPage",
"navigation",
"vitalsLcp",
"None",
"SSR",
"Android 14",
"Path Traversal",
"POST /api/login {\"user\":\"admin\"}",
"axios/1.6.0",
"/admin/login",
"Acme Corp",
"US",
"hosting",
"[\"torbot_ua_mismatch\",\"cookie_reuse\"]",
"sess_005",
"None",
"false",
"ORD-008",
"None",
"updateCart",
"dc-east"
],
[
"Q230 warehouse event record 1",
"stderr",
"PL-008",
"21.4",
"88.7",
"480.0",
"SORT-Z9",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"275",
"2.5",
"72",
"manual",
"200",
"3",
"5",
"24.8",
"BS-2025-D4",
"batch ABC123 processed successfully",
"ACK batch batchIdList:BT-008-2026 archived",
"ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry",
"E002",
"@warehouse-Android-track-v1",
"None",
"DataIntegrityException: pallet_id PL-002 checksum mismatch",
"{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}",
"[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]",
"[\"cid-jkl012\",\"status-ok\"]",
"SearchItems",
"10.12.1.203",
"192.168.1.14",
"staging",
"critical",
"cli",
"EU-WEST",
"node-fetch/3.3.2 (tracking-service)",
"CheckThreshold",
"site-syd-04",
"None",
"DELETE",
"404",
"outbound",
"fail",
"task-p6q7r8",
"ent-003-wh",
"capacity",
"mismatch",
"allow",
"active",
"track",
"None",
"45",
"warehouse-south",
"None",
"v2.0.0",
"BIN-J0",
"256",
"scan-hub",
"rk-warehouse-001",
"tok-wh-qrs345tuv678",
"warehouse-sync",
"None",
"sess_def456",
"200",
"1800000",
"160000",
"0.1",
"Mobile",
"itemPage",
"navigation",
"vitalsLcp",
"None",
"SSR",
"Android 14",
"Path Traversal",
"POST /api/login {\"user\":\"admin\"}",
"axios/1.6.0",
"/admin/login",
"Acme Corp",
"US",
"hosting",
"[\"torbot_ua_mismatch\",\"cookie_reuse\"]",
"sess_005",
"None",
"false",
"ORD-008",
"None",
"updateCart",
"dc-east"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q231",
"sql": "SELECT _timestamp, (CASE WHEN char_length(exception_message) > 0 THEN exception_message ELSE error_code END) AS display_error, action_category, page_slug, device_type FROM \"{stream}\" WHERE action_category = 'performanceMetric'",
"category": "basic_select",
"time_offset": {
"start_offset": 13799000000,
"end_offset": 13873000000
},
"expected": {
"columns": [
"display_error",
"action_category",
"page_slug",
"device_type"
],
"results": [
[
"ConfigurationException: missing facility_zone ZONE-3 override",
"performanceMetric",
"itemPage",
"Tablet"
],
[
"SecurityException: unauthorized access to control_center CC-ALPHA",
"performanceMetric",
"cartPage",
"Mobile"
],
[
"ConfigurationException: missing facility_zone ZONE-3 override",
"performanceMetric",
"itemPage",
"Tablet"
],
[
"NetworkException: connection to batch sync failed",
"performanceMetric",
"checkoutPage",
"Computer"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q232",
"sql": "SELECT * FROM \"{stream}\" WHERE latency_ms BETWEEN 10 AND 100 AND action_category = 'performanceMetric' AND info_tag IS NULL AND bot_flag IS NULL",
"category": "basic_select",
"time_offset": {
"start_offset": 13859000000,
"end_offset": 13933000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q232 warehouse event record 4",
"stdout",
"PL-005",
"67.9",
"75.3",
"320.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"410",
"2.0",
"24",
"manual",
"1000",
"2",
"4",
"19.2",
"BS-2026-C3",
"batch DEF234 registered at loading dock",
"ACK batch batchIdList:BT-007-2026 dispatched",
"WARN: lane jam detected at conveyor_segment=3",
"E001",
"@warehouse-Windows-scan-v2",
"None",
"TimeoutException: lane LANE-A did not respond within 5000ms",
"{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}",
"[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]",
"[\"cid-ghi789\",\"status-failed\"]",
"SyncZone",
"10.12.1.202",
"192.168.1.13",
"prod",
"low",
"dashboard",
"US-WEST",
"Alamofire/5.8.0 (iOS; scan-app)",
"MergeBatch",
"site-tok-03",
"None",
"PUT",
"400",
"inbound",
"pass",
"task-m3n4o5",
"ent-002-wh",
"error",
"overflow",
"allow",
"passive",
"merge",
"None",
"12",
"warehouse-north",
"None",
"v1.1.2",
"BIN-I9",
"16384",
"zone-controller",
"rk-warehouse-010",
"tok-wh-klm789nop012",
"warehouse-merge",
"None",
"ctl_vwx901",
"404",
"2500000",
"70000",
"0.15",
"Tablet",
"itemPage",
"performanceMetric",
"clickEvent",
"None",
"SSR",
"Windows 11",
"XSS Reflected (Header)",
"GET /.env",
"Mozilla/5.0 Safari/17.2",
"/ip/192.168.1.1",
"DataCenter EU",
"JP",
"business",
"[\"rate_limit_exceeded\",\"geo_anomaly\"]",
"sess_003",
"None",
"false",
"ORD-007",
"None",
"verifyPayment",
"dc-west"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q233",
"sql": "SELECT concat(page_slug, ':', action_category, ':', action_subcategory) AS event_path, (CASE WHEN char_length(exception_message) > 0 THEN exception_message ELSE 'no_error' END) AS error_text, visitor_session_id, device_type FROM \"{stream}\" WHERE org_name = 'warehouse-east'",
"category": "basic_select",
"time_offset": {
"start_offset": 13919000000,
"end_offset": 13993000000
},
"expected": {
"columns": [
"event_path",
"error_text",
"visitor_session_id",
"device_type"
],
"results": [
[
"cartPage:performanceMetric:vitalsCls",
"SecurityException: unauthorized access to control_center CC-ALPHA",
"sess_001",
"Mobile"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q234",
"sql": "SELECT _timestamp, coalesce(page_url, resource_path) AS page_ref, coalesce(exception_message, upstream_error_code, error_code, 'unknown') AS error_label FROM \"{stream}\" WHERE action_category = 'performanceMetric' AND (exception_message LIKE '%Exception%' OR upstream_error_code LIKE '%UP-E%')",
"category": "basic_select",
"time_offset": {
"start_offset": 13979000000,
"end_offset": 14053000000
},
"expected": {
"columns": [
"page_ref",
"error_label"
],
"results": [
[
"https://shop.example.com/item/1003",
"SecurityException: unauthorized access to control_center CC-ALPHA"
],
[
"https://shop.example.com/search?q=test",
"ResourceExhaustedException: sorter_model SORT-M3 queue full"
],
[
"https://shop.example.com/item/1003",
"SecurityException: unauthorized access to control_center CC-ALPHA"
],
[
"None",
"ConfigurationException: missing facility_zone ZONE-3 override"
],
[
"https://shop.example.com/item/1004",
"NetworkException: connection to batch sync failed"
],
[
"https://shop.example.com/item/1004",
"NetworkException: connection to batch sync failed"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q235",
"sql": "SELECT * FROM \"{stream}\" WHERE org_name IN ('warehouse-north', 'warehouse-south', 'warehouse-central') AND build_version NOT IN ('v1.0.0', 'v1.1.2') AND device_type IN ('Mobile', 'Tablet', 'Computer') AND action_category = 'navigation' AND page_slug IN ('itemPage', 'homePage') AND visitor_session_id IS NOT NULL",
"category": "basic_select",
"time_offset": {
"start_offset": 14039000000,
"end_offset": 14113000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q235 warehouse event record 2",
"stdout",
"PL-002",
"88.1",
"25.0",
"190.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"340",
"0.5",
"500",
"auto",
"250",
"2",
"1",
"26.3",
"BS-2026-B2",
"batch MNO456 merged into pallet PL-005",
"ACK batch batchIdList:BT-004-2026 validated",
"GET /api/v1/warehouse/status 200 OK",
"E008",
"@warehouse-Android-scan-v2",
"UP-E002",
"StateTransitionException: operation_mode hybrid invalid state",
"{\"message\":{\"endpoint\":\"mergeBatch\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"boot\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"calibrate\\\",\\\"startTime\\\":\\\"100\\\"}\"]",
"[\"cid-bcd890\",\"status-ok\"]",
"CheckThreshold",
"10.12.0.104",
"192.168.1.10",
"staging",
"critical",
"cli",
"EU-CENTRAL",
"PostmanRuntime/7.35.0",
"DeleteRecord",
"site-tor-10",
"/api/v1/health/check",
"DELETE",
"200",
"outbound",
"pass",
"task-d4e5f6",
"ent-009-wh",
"error",
"mismatch",
"block",
"passive",
"track",
"/logs/warehouse/app.log",
"78",
"warehouse-central",
"true",
"v2.0.8",
"BIN-F6",
"2048",
"charge-checker",
"rk-warehouse-007",
"tok-wh-stu901vwx234",
"warehouse-sort",
"variant_c",
"var2_mno345",
"200",
"3400000",
"120000",
"0.08",
"Computer",
"homePage",
"navigation",
"vitalsLcp",
"https://shop.example.com/item/1005",
"CSR",
"iOS 17.4",
"Desync Attack",
"GET /api/products",
"python-requests/2.31",
"/ip/10.0.0.1",
"NetGuard AS",
"US",
"business",
"[\"cookie_reuse\",\"session_hijack\"]",
"sess_002",
"None",
"false",
"ORD-005",
"Allowlisted",
"verifyPayment",
"dc-central"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q236",
"sql": "SELECT _timestamp, visitor_session_id, (CASE WHEN os_platform LIKE '%Android%' THEN 'Android' WHEN os_platform LIKE '%iOS%' OR os_platform LIKE '%iPhone%' THEN 'iOS' ELSE 'Other' END) AS platform, action_category, page_slug FROM \"{stream}\" WHERE org_name = 'warehouse-east'",
"category": "basic_select",
"time_offset": {
"start_offset": 14099000000,
"end_offset": 14173000000
},
"expected": {
"columns": [
"visitor_session_id",
"platform",
"action_category",
"page_slug"
],
"results": [
[
"sess_001",
"Android",
"performanceMetric",
"itemPage"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q237",
"sql": "SELECT _timestamp, exception_message, error_code, component_name FROM \"{stream}\" WHERE (exception_message LIKE '%NullPointer%' OR exception_message LIKE '%Timeout%' OR exception_message LIKE '%ResourceExhausted%') AND page_slug IN ('itemPage', 'cartPage', 'checkoutPage', 'searchPage') AND org_name IN ('warehouse-east', 'warehouse-central')",
"category": "basic_select",
"time_offset": {
"start_offset": 14159000000,
"end_offset": 14233000000
},
"expected": {
"columns": [
"exception_message",
"error_code",
"component_name"
],
"results": [
[
"ResourceExhaustedException: sorter_model SORT-M3 queue full",
"E003",
"track-router"
],
[
"ResourceExhaustedException: sorter_model SORT-M3 queue full",
"E003",
"track-router"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q238",
"sql": "SELECT _timestamp, visitor_session_id, action_category, page_slug, exception_message FROM \"{stream}\" WHERE org_name = 'warehouse-east' AND action_category = 'performanceMetric' ORDER BY _timestamp DESC LIMIT 20",
"category": "basic_select",
"time_offset": {
"start_offset": 14219000000,
"end_offset": 14293000000
},
"expected": {
"columns": [
"visitor_session_id",
"action_category",
"page_slug",
"exception_message"
],
"results": [
[
"sess_001",
"performanceMetric",
"itemPage",
"OverflowException: throughput_rate 999.0 exceeds max capacity"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q239",
"sql": "SELECT _timestamp, coalesce(page_url, page_slug) AS source, action_category, action_subcategory, visitor_session_id FROM \"{stream}\" WHERE org_name IN ('warehouse-south') AND action_category = 'navigation'",
"category": "basic_select",
"time_offset": {
"start_offset": 14279000000,
"end_offset": 14353000000
},
"expected": {
"columns": [
"source",
"action_category",
"action_subcategory",
"visitor_session_id"
],
"results": [
[
"itemPage",
"navigation",
"vitalsLcp",
"sess_005"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q240",
"sql": "SELECT * FROM \"{stream}\" WHERE exception_message LIKE '%Exception%' AND exception_message NOT LIKE '%Timeout%' AND exception_message NOT LIKE '%NullPointer%' AND error_code LIKE '%E00%' AND page_slug IN ('itemPage', 'cartPage')",
"category": "basic_select",
"time_offset": {
"start_offset": 14339000000,
"end_offset": 14413000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q239 warehouse event record 4",
"stderr",
"PL-008",
"21.4",
"88.7",
"480.0",
"SORT-Z9",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"275",
"2.5",
"72",
"manual",
"200",
"3",
"5",
"24.8",
"BS-2025-D4",
"batch ABC123 processed successfully",
"ACK batch batchIdList:BT-008-2026 archived",
"ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry",
"E002",
"@warehouse-Android-track-v1",
"None",
"DataIntegrityException: pallet_id PL-002 checksum mismatch",
"{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}",
"[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]",
"[\"cid-jkl012\",\"status-ok\"]",
"SearchItems",
"10.12.1.203",
"192.168.1.14",
"staging",
"critical",
"cli",
"EU-WEST",
"node-fetch/3.3.2 (tracking-service)",
"CheckThreshold",
"site-syd-04",
"None",
"DELETE",
"404",
"outbound",
"fail",
"task-p6q7r8",
"ent-003-wh",
"capacity",
"mismatch",
"allow",
"active",
"track",
"None",
"45",
"warehouse-south",
"None",
"v2.0.0",
"BIN-J0",
"256",
"scan-hub",
"rk-warehouse-001",
"tok-wh-qrs345tuv678",
"warehouse-sync",
"None",
"sess_def456",
"200",
"1800000",
"160000",
"0.1",
"Mobile",
"itemPage",
"navigation",
"vitalsLcp",
"None",
"SSR",
"Android 14",
"Path Traversal",
"POST /api/login {\"user\":\"admin\"}",
"axios/1.6.0",
"/admin/login",
"Acme Corp",
"US",
"hosting",
"[\"torbot_ua_mismatch\",\"cookie_reuse\"]",
"sess_005",
"None",
"false",
"ORD-008",
"None",
"updateCart",
"dc-east"
],
[
"Q240 warehouse event record 1",
"stdout",
"PL-002",
"21.4",
"88.7",
"480.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"275",
"2.5",
"72",
"auto",
"200",
"3",
"5",
"24.8",
"BS-2025-D4",
"batch ABC123 processed successfully",
"ACK batch batchIdList:BT-008-2026 archived",
"ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry",
"E002",
"@warehouse-Android-track-v1",
"None",
"DataIntegrityException: pallet_id PL-002 checksum mismatch",
"{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}",
"[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]",
"[\"cid-jkl012\",\"status-ok\"]",
"SearchItems",
"10.12.1.203",
"192.168.1.14",
"staging",
"critical",
"cli",
"EU-WEST",
"node-fetch/3.3.2 (tracking-service)",
"CheckThreshold",
"site-syd-04",
"None",
"DELETE",
"404",
"outbound",
"fail",
"task-p6q7r8",
"ent-003-wh",
"capacity",
"mismatch",
"allow",
"active",
"track",
"None",
"45",
"warehouse-south",
"None",
"v2.0.0",
"BIN-J0",
"256",
"scan-hub",
"rk-warehouse-001",
"tok-wh-qrs345tuv678",
"warehouse-sync",
"None",
"sess_def456",
"200",
"1800000",
"160000",
"0.1",
"Mobile",
"itemPage",
"navigation",
"vitalsLcp",
"None",
"SSR",
"Android 14",
"Path Traversal",
"POST /api/login {\"user\":\"admin\"}",
"axios/1.6.0",
"/admin/login",
"Acme Corp",
"US",
"hosting",
"[\"torbot_ua_mismatch\",\"cookie_reuse\"]",
"sess_005",
"None",
"false",
"ORD-008",
"None",
"updateCart",
"dc-east"
],
[
"Q240 warehouse event record 3 ACK batch batchIdList:Q240-3",
"stderr",
"PL-004",
"12.5",
"5.0",
"725.0",
"SORT-Q5",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"500",
"0.8",
"360",
"auto",
"600",
"2",
"2",
"32.5",
"BS-2026-B2",
"track TRK-abc-def diverted to LANE-B",
"ACK batch batchIdList:BT-010-2026 completed",
"INFO: throughput_rate=840.0 spike at facility_zone=ZONE-4",
"E004",
"@warehouse-Android-sort-v1",
"None",
"SecurityException: unauthorized access to control_center CC-ALPHA",
"{\"message\":{\"endpoint\":\"updateBatch\",\"status\":\"pending\"}}",
"[\"{\\\"name\\\":\\\"merge\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"split\\\",\\\"startTime\\\":\\\"120\\\"}\", \"{\\\"name\\\":\\\"route\\\",\\\"startTime\\\":\\\"240\\\"}\"]",
"[\"cid-pqr678\",\"status-ok\"]",
"DeleteRecord",
"10.12.1.205",
"192.168.2.21",
"prod",
"critical",
"scheduler",
"AP-SOUTH",
"curl/7.88.1 (x86_64-pc-linux-gnu)",
"RetryScan",
"site-ber-06",
"None",
"POST",
"503",
"inbound",
"pass",
"task-v2w3x4",
"ent-005-wh",
"error",
"timeout",
"allow",
"disabled",
"sort",
"None",
"1450",
"warehouse-east",
"None",
"v2.2.0",
"BIN-B2",
"65536",
"batch-sync",
"rk-warehouse-003",
"tok-wh-cde567fgh890",
"warehouse-scan",
"None",
"sess_abc123",
"200",
"900000",
"150000",
"0.3",
"Mobile",
"cartPage",
"performanceMetric",
"vitalsCls",
"None",
"SSR",
"Android 12",
"SSRF Probe",
"POST /api/order {\"item\":123}",
"Java/11.0.20",
"/assets/js/app.js",
"DigitalOcean LLC",
"US",
"education",
"[\"session_hijack\",\"ip_hop\"]",
"sess_001",
"None",
"false",
"ORD-002",
"None",
"updateItems",
"dc-east"
],
[
"Q240 warehouse event record 4",
"stdout",
"PL-005",
"33.0",
"33.3",
"840.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"50",
"1.2",
"720",
"manual",
"850",
"4",
"3",
"40.0",
"BS-2026-C3",
"batch XYZ789 timed out at checkpoint 3",
"ACK batch batchIdList:BT-001-2026 received",
"WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9",
"E005",
"@warehouse-iOS-sort-v2",
"UP-E009",
"ConfigurationException: missing facility_zone ZONE-3 override",
"{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}",
"[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]",
"[\"cid-stu901\",\"status-warning\"]",
"ScanPallet",
"10.12.0.101",
"192.168.2.22",
"staging",
"high",
"dashboard",
"AP-EAST",
"Python-urllib/3.11 warehouse-client",
"SyncZone",
"site-dub-07",
"/api/v2/sorter/scan",
"GET",
"401",
"outbound",
"fail",
"task-y5z6a7",
"ent-006-wh",
"capacity",
"overflow",
"block",
"active",
"scan",
"/data/sorter/temp.dat",
"89",
"warehouse-west",
"false",
"v3.0.1",
"BIN-C3",
"128",
"pallet-mapper",
"rk-warehouse-004",
"tok-wh-abc123def456",
"warehouse-track",
"control",
"sess_def456",
"403",
"1500000",
"200000",
"0.06",
"Tablet",
"itemPage",
"performanceMetric",
"pageView",
"https://shop.example.com/cart",
"CSR",
"Mac OS X (iPhone)",
"Command Injection",
"GET /search?q=test",
"Mozilla/5.0 Edge/120",
"/swag/graphql",
"FastHost Ltd",
"US",
"business",
"[\"scraping_pattern\",\"high_freq\"]",
"sess_001",
"None",
"false",
"ORD-001",
"None",
"getInventory",
"dc-central"
],
[
"Q241 warehouse event record 0 ACK batch batchIdList:Q241-0",
"stdout",
"PL-006",
"12.5",
"5.0",
"725.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"500",
"0.8",
"360",
"hybrid",
"600",
"2",
"2",
"32.5",
"BS-2026-B2",
"track TRK-abc-def diverted to LANE-B",
"ACK batch batchIdList:BT-010-2026 completed",
"INFO: throughput_rate=840.0 spike at facility_zone=ZONE-4",
"E004",
"@warehouse-Android-sort-v1",
"None",
"SecurityException: unauthorized access to control_center CC-ALPHA",
"{\"message\":{\"endpoint\":\"updateBatch\",\"status\":\"pending\"}}",
"[\"{\\\"name\\\":\\\"merge\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"split\\\",\\\"startTime\\\":\\\"120\\\"}\", \"{\\\"name\\\":\\\"route\\\",\\\"startTime\\\":\\\"240\\\"}\"]",
"[\"cid-pqr678\",\"status-ok\"]",
"DeleteRecord",
"10.12.1.205",
"192.168.2.21",
"prod",
"critical",
"scheduler",
"AP-SOUTH",
"curl/7.88.1 (x86_64-pc-linux-gnu)",
"RetryScan",
"site-ber-06",
"None",
"POST",
"503",
"inbound",
"pass",
"task-v2w3x4",
"ent-005-wh",
"error",
"timeout",
"allow",
"disabled",
"sort",
"None",
"1450",
"warehouse-east",
"None",
"v2.2.0",
"BIN-B2",
"65536",
"batch-sync",
"rk-warehouse-003",
"tok-wh-cde567fgh890",
"warehouse-scan",
"None",
"sess_abc123",
"200",
"900000",
"150000",
"0.3",
"Mobile",
"cartPage",
"performanceMetric",
"vitalsCls",
"None",
"SSR",
"Android 12",
"SSRF Probe",
"POST /api/order {\"item\":123}",
"Java/11.0.20",
"/assets/js/app.js",
"DigitalOcean LLC",
"US",
"education",
"[\"session_hijack\",\"ip_hop\"]",
"sess_001",
"None",
"false",
"ORD-002",
"None",
"updateItems",
"dc-east"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q241",
"sql": "SELECT _timestamp, visitor_session_id, action_category, error_code, exception_message, (CASE WHEN latency_ms > 500 THEN 'slow' WHEN latency_ms > 100 THEN 'medium' ELSE 'fast' END) AS speed_class FROM \"{stream}\" WHERE action_category = 'performanceMetric' AND latency_ms > 0",
"category": "basic_select",
"time_offset": {
"start_offset": 14399000000,
"end_offset": 14473000000
},
"expected": {
"columns": [
"visitor_session_id",
"action_category",
"error_code",
"exception_message",
"speed_class"
],
"results": [
[
"sess_001",
"performanceMetric",
"E005",
"ConfigurationException: missing facility_zone ZONE-3 override",
"fast"
],
[
"sess_001",
"performanceMetric",
"E004",
"SecurityException: unauthorized access to control_center CC-ALPHA",
"slow"
],
[
"sess_001",
"performanceMetric",
"E005",
"ConfigurationException: missing facility_zone ZONE-3 override",
"fast"
],
[
"sess_002",
"performanceMetric",
"E006",
"NetworkException: connection to batch sync failed",
"slow"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q242",
"sql": "SELECT * FROM \"{stream}\" WHERE bot_flag IS NULL AND info_tag IS NULL AND action_category = 'performanceMetric' AND org_name = 'warehouse-east'",
"category": "basic_select",
"time_offset": {
"start_offset": 14459000000,
"end_offset": 14533000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q242 warehouse event record 2",
"stdout",
"PL-005",
"94.6",
"42.5",
"900.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"88",
"1.0",
"90",
"manual",
"500",
"5",
"2",
"30.1",
"BS-2026-A1",
"segment 88 speed anomaly detected",
"ACK batch batchIdList:BT-005-2026 processed",
"POST /api/v2/sorter/scan 201 Created",
"E009",
"@warehouse-iOS-scan-v1",
"UP-E003",
"OverflowException: throughput_rate 999.0 exceeds max capacity",
"{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}",
"[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]",
"[\"cid-abc123\",\"status-ok\"]",
"ArchiveLog",
"10.12.0.105",
"192.168.1.11",
"dev",
"high",
"api",
"AP-CENTRAL",
"axios/1.6.0 (Node.js; warehouse-ui)",
"ScanPallet",
"site-nyc-01",
"/api/v1/archive/log",
"GET",
"201",
"internal",
"fail",
"task-g7h8i9",
"ent-010-wh",
"capacity",
"jam",
"allow",
"disabled",
"scan",
"/data/sorter/output.dat",
"1900",
"warehouse-east",
"false",
"v3.2.0",
"BIN-G7",
"4096",
"sorter-engine",
"rk-warehouse-008",
"tok-wh-yza567bcd890",
"warehouse-scan",
"control",
"sess_abc123",
"200",
"1100000",
"180000",
"0.25",
"Mobile",
"itemPage",
"performanceMetric",
"vitalsInp",
"https://shop.example.com/item/1006",
"SSR",
"Android 13",
"Evasion Technique",
"PUT /api/cart/update",
"Mozilla/5.0 Firefox/121",
"/api/v1/data",
"HostPro Inc",
"BR",
"hosting",
"[\"credential_stuffing\"]",
"sess_001",
"None",
"false",
"ORD-003",
"None",
"updateItems",
"dc-west"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q243",
"sql": "SELECT _timestamp, visitor_session_id, os_platform, action_category, exception_message FROM \"{stream}\" WHERE re_match(os_platform, 'Android|iPhone|iOS') AND page_slug IN ('itemPage', 'cartPage') AND error_code IS NOT NULL",
"category": "basic_select",
"time_offset": {
"start_offset": 14519000000,
"end_offset": 14593000000
},
"expected": {
"columns": [
"visitor_session_id",
"os_platform",
"action_category",
"exception_message"
],
"results": [
[
"sess_005",
"Android 14",
"navigation",
"DataIntegrityException: pallet_id PL-002 checksum mismatch"
],
[
"sess_001",
"Android 12",
"performanceMetric",
"SecurityException: unauthorized access to control_center CC-ALPHA"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q244",
"sql": "SELECT _timestamp, coalesce(exception_message, 'N/A') AS error_text, coalesce(endpoint_path, resource_path) AS called_path, action_category FROM \"{stream}\" WHERE org_name = 'warehouse-east' AND build_version IS NOT NULL AND action_category IN ('performanceMetric', 'interaction')",
"category": "basic_select",
"time_offset": {
"start_offset": 14579000000,
"end_offset": 14653000000
},
"expected": {
"columns": [
"error_text",
"called_path",
"action_category"
],
"results": [
[
"SecurityException: unauthorized access to control_center CC-ALPHA",
"/api/v1/warehouse/delete",
"performanceMetric"
],
[
"SecurityException: unauthorized access to control_center CC-ALPHA",
"/api/v1/warehouse/delete",
"performanceMetric"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q245",
"sql": "SELECT * FROM \"{stream}\" WHERE page_slug IN ('itemPage', 'searchPage', 'cartPage') AND action_category IN ('performanceMetric', 'navigation', 'interaction') AND os_platform IN ('Android 14', 'iOS 17.4') AND device_type IN ('Mobile', 'Tablet')",
"category": "basic_select",
"time_offset": {
"start_offset": 14639000000,
"end_offset": 14713000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q244 warehouse event record 4",
"stdout",
"PL-001",
"72.8",
"10.0",
"555.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"200",
"3.5",
"120",
"hybrid",
"100",
"3",
"5",
"22.0",
"BS-2026-A1",
"track TRK-ghi-jkl rerouted to ZONE-3",
"ACK batch batchIdList:BT-003-2026 confirmed",
"INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint",
"E007",
"@warehouse-Windows-sort-v1",
"None",
"ValidationException: item_count exceeds defect_limit bounds",
"{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}",
"[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]",
"[\"cid-yza567\",\"status-error\"]",
"MergeBatch",
"10.12.0.103",
"192.168.2.24",
"prod",
"low",
"dashboard",
"US-CENTRAL",
"Go-http-client/2.0 conveyor-monitor",
"UpdateBatch",
"site-mum-09",
"None",
"PUT",
"200",
"inbound",
"pass",
"task-a1b2c3",
"ent-008-wh",
"security",
"overflow",
"allow",
"active",
"merge",
"None",
"3200",
"warehouse-south",
"None",
"v1.0.5",
"BIN-E5",
"1024",
"temp-regulator",
"rk-warehouse-006",
"tok-wh-mno345pqr678",
"warehouse-sync",
"None",
"var1_pqr012",
"200",
"2100000",
"300000",
"0.12",
"Mobile",
"itemPage",
"interaction",
"vitalsInp",
"None",
"SSR",
"Android 14",
"File Inclusion",
"POST /admin/config",
"curl/7.88.1",
"/health",
"Acme Corp",
"UK",
"business",
"[\"torbot_ua_mismatch\"]",
"sess_003",
"None",
"true",
"ORD-004",
"None",
"updateItems",
"dc-east"
],
[
"Q245 warehouse event record 1",
"stdout",
"PL-003",
"72.8",
"10.0",
"555.0",
"SORT-M3",
"LANE-B",
"ZONE-1",
"CC-DELTA",
"200",
"3.5",
"120",
"manual",
"100",
"3",
"5",
"22.0",
"BS-2026-A1",
"track TRK-ghi-jkl rerouted to ZONE-3",
"ACK batch batchIdList:BT-003-2026 confirmed",
"INFO: runtime_hours=1000 maintenance due http://warehouse.local/maint",
"E007",
"@warehouse-Windows-sort-v1",
"None",
"ValidationException: item_count exceeds defect_limit bounds",
"{\"message\":{\"endpoint\":\"rerouteTrack\",\"status\":\"queued\"}}",
"[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"validate\\\",\\\"startTime\\\":\\\"200\\\"}\", \"{\\\"name\\\":\\\"complete\\\",\\\"startTime\\\":\\\"400\\\"}\"]",
"[\"cid-yza567\",\"status-error\"]",
"MergeBatch",
"10.12.0.103",
"192.168.2.24",
"prod",
"low",
"dashboard",
"US-CENTRAL",
"Go-http-client/2.0 conveyor-monitor",
"UpdateBatch",
"site-mum-09",
"None",
"PUT",
"200",
"inbound",
"pass",
"task-a1b2c3",
"ent-008-wh",
"security",
"overflow",
"allow",
"active",
"merge",
"None",
"3200",
"warehouse-south",
"None",
"v1.0.5",
"BIN-E5",
"1024",
"temp-regulator",
"rk-warehouse-006",
"tok-wh-mno345pqr678",
"warehouse-sync",
"None",
"var1_pqr012",
"200",
"2100000",
"300000",
"0.12",
"Mobile",
"itemPage",
"interaction",
"vitalsInp",
"None",
"SSR",
"Android 14",
"File Inclusion",
"POST /admin/config",
"curl/7.88.1",
"/health",
"Acme Corp",
"UK",
"business",
"[\"torbot_ua_mismatch\"]",
"sess_003",
"None",
"true",
"ORD-004",
"None",
"updateItems",
"dc-east"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q246",
"sql": "SELECT DISTINCT component_name, error_code FROM \"{stream}\" WHERE (exception_message LIKE '%Exception%' OR upstream_error_code LIKE '%UP-E%') AND org_name = 'warehouse-east'",
"category": "basic_select",
"time_offset": {
"start_offset": 14699000000,
"end_offset": 14773000000
},
"expected": {
"columns": [
"component_name",
"error_code"
],
"results": [
[
"sorter-engine",
"E009"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q247",
"sql": "SELECT * FROM \"{stream}\" WHERE org_name NOT IN ('warehouse-south', 'warehouse-central') AND build_version NOT IN ('v1.0.0', 'v1.1.2') AND error_code NOT IN ('E002', 'E004') AND action_category NOT IN ('navigation')",
"category": "basic_select",
"time_offset": {
"start_offset": 14759000000,
"end_offset": 14833000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q247 warehouse event record 3 ACK batch batchIdList:Q247-3",
"stdout",
"PL-007",
"33.0",
"33.3",
"840.0",
"SORT-M3",
"LANE-B",
"ZONE-1",
"CC-DELTA",
"50",
"1.2",
"720",
"auto",
"850",
"4",
"3",
"40.0",
"BS-2026-C3",
"batch XYZ789 timed out at checkpoint 3",
"ACK batch batchIdList:BT-001-2026 received",
"WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9",
"E005",
"@warehouse-iOS-sort-v2",
"UP-E009",
"ConfigurationException: missing facility_zone ZONE-3 override",
"{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}",
"[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]",
"[\"cid-stu901\",\"status-warning\"]",
"ScanPallet",
"10.12.0.101",
"192.168.2.22",
"staging",
"high",
"dashboard",
"AP-EAST",
"Python-urllib/3.11 warehouse-client",
"SyncZone",
"site-dub-07",
"/api/v2/sorter/scan",
"GET",
"401",
"outbound",
"fail",
"task-y5z6a7",
"ent-006-wh",
"capacity",
"overflow",
"block",
"active",
"scan",
"/data/sorter/temp.dat",
"89",
"warehouse-west",
"false",
"v3.0.1",
"BIN-C3",
"128",
"pallet-mapper",
"rk-warehouse-004",
"tok-wh-abc123def456",
"warehouse-track",
"control",
"sess_def456",
"403",
"1500000",
"200000",
"0.06",
"Tablet",
"itemPage",
"performanceMetric",
"pageView",
"https://shop.example.com/cart",
"CSR",
"Mac OS X (iPhone)",
"Command Injection",
"GET /search?q=test",
"Mozilla/5.0 Edge/120",
"/swag/graphql",
"FastHost Ltd",
"US",
"business",
"[\"scraping_pattern\",\"high_freq\"]",
"sess_001",
"None",
"false",
"ORD-001",
"None",
"getInventory",
"dc-central"
],
[
"Q247 warehouse event record 4",
"stderr",
"PL-008",
"55.2",
"66.6",
"290.0",
"SORT-Z9",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"120",
"2.8",
"48",
"manual",
"1200",
"1",
"4",
"18.5",
"BS-2025-D4",
"segment 17 weight threshold exceeded",
"ACK batch batchIdList:BT-002-2026 acknowledged",
"ERROR: scan_attempts exhausted for pallet_id=PL-007",
"E006",
"@warehouse-Linux-sort-v3",
"None",
"NetworkException: connection to batch sync failed",
"{\"message\":{\"endpoint\":\"scanPallet\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"init\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"process\\\",\\\"startTime\\\":\\\"150\\\"}\"]",
"[\"cid-vwx234\",\"status-ok\"]",
"RerouteTrack",
"10.12.0.102",
"192.168.2.23",
"dev",
"medium",
"cli",
"SA-EAST",
"Java/17.0.8 (OpenJDK; sorter-agent)",
"SearchItems",
"site-sin-08",
"None",
"POST",
"403",
"internal",
"denied",
"task-b8c9d0",
"ent-007-wh",
"latency",
"timeout",
"allow",
"passive",
"sort",
"None",
"567",
"warehouse-north",
"None",
"v3.1.0",
"BIN-D4",
"512",
"lane-monitor",
"rk-warehouse-005",
"tok-wh-ghi789jkl012",
"warehouse-merge",
"None",
"ctl_xyz789",
"200",
"2800000",
"95000",
"0.05",
"Computer",
"checkoutPage",
"performanceMetric",
"vitalsLcp",
"None",
"SSR",
"Android 14",
"XSS Stored (Body)",
"GET /favicon.ico",
"Mozilla/5.0 Chrome/120",
"/api/v1/users",
"CloudServe GmbH",
"DE",
"hosting",
"[\"rate_limit_exceeded\"]",
"sess_002",
"None",
"false",
"ORD-003",
"None",
"placeOrder",
"dc-west"
],
[
"Q248 warehouse event record 0 ACK batch batchIdList:Q248-0",
"stdout",
"PL-001",
"33.0",
"33.3",
"840.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"50",
"1.2",
"720",
"hybrid",
"850",
"4",
"3",
"40.0",
"BS-2026-C3",
"batch XYZ789 timed out at checkpoint 3",
"ACK batch batchIdList:BT-001-2026 received",
"WARN: cell_temp=38.2 exceeding limit at sorter_model=SORT-Z9",
"E005",
"@warehouse-iOS-sort-v2",
"None",
"ConfigurationException: missing facility_zone ZONE-3 override",
"{\"message\":{\"endpoint\":\"deleteRecord\",\"status\":\"failed\"}}",
"[\"{\\\"name\\\":\\\"start\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"pause\\\",\\\"startTime\\\":\\\"160\\\"}\", \"{\\\"name\\\":\\\"resume\\\",\\\"startTime\\\":\\\"320\\\"}\", \"{\\\"name\\\":\\\"stop\\\",\\\"startTime\\\":\\\"480\\\"}\"]",
"[\"cid-stu901\",\"status-warning\"]",
"ScanPallet",
"10.12.0.101",
"192.168.2.22",
"staging",
"high",
"dashboard",
"AP-EAST",
"Python-urllib/3.11 warehouse-client",
"SyncZone",
"site-dub-07",
"None",
"GET",
"401",
"outbound",
"fail",
"task-y5z6a7",
"ent-006-wh",
"capacity",
"overflow",
"block",
"active",
"scan",
"None",
"89",
"warehouse-west",
"None",
"v3.0.1",
"BIN-C3",
"128",
"pallet-mapper",
"rk-warehouse-004",
"tok-wh-abc123def456",
"warehouse-track",
"None",
"sess_def456",
"403",
"1500000",
"200000",
"0.06",
"Tablet",
"itemPage",
"performanceMetric",
"pageView",
"None",
"CSR",
"Mac OS X (iPhone)",
"Command Injection",
"GET /search?q=test",
"Mozilla/5.0 Edge/120",
"/swag/graphql",
"FastHost Ltd",
"US",
"business",
"[\"scraping_pattern\",\"high_freq\"]",
"sess_001",
"None",
"false",
"ORD-001",
"None",
"getInventory",
"dc-central"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q248",
"sql": "SELECT _timestamp, action_category, action_subcategory, page_slug, latency_ms FROM \"{stream}\" WHERE action_category = 'performanceMetric' AND latency_ms > 0 ORDER BY latency_ms DESC, _timestamp ASC LIMIT 15",
"category": "basic_select",
"time_offset": {
"start_offset": 14819000000,
"end_offset": 14893000000
},
"expected": {
"columns": [
"action_category",
"action_subcategory",
"page_slug",
"latency_ms"
],
"results": [
[
"performanceMetric",
"vitalsInp",
"itemPage",
"1900"
],
[
"performanceMetric",
"vitalsLcp",
"checkoutPage",
"567"
],
[
"performanceMetric",
"vitalsLcp",
"checkoutPage",
"567"
],
[
"performanceMetric",
"pageView",
"itemPage",
"89"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q249",
"sql": "SELECT * FROM \"{stream}\" WHERE component_name LIKE '%sorter%' OR component_name LIKE '%conveyor%' OR component_name LIKE '%zone%' OR component_name LIKE '%scan%'",
"category": "basic_select",
"time_offset": {
"start_offset": 14879000000,
"end_offset": 14953000000
},
"expected": {
"columns": [
"log",
"stream",
"pallet_id",
"load_factor",
"charge_remaining",
"throughput_rate",
"sorter_model",
"conveyor_lane",
"facility_zone",
"control_center",
"item_count",
"defect_limit",
"runtime_hours",
"operation_mode",
"package_size",
"scan_attempts",
"conveyor_segment",
"cell_temp",
"build_signature",
"event_detail",
"ack_detail",
"log_message",
"error_code",
"service_owner",
"upstream_error_code",
"exception_message",
"request_payload",
"phase_data",
"db_info",
"api_name",
"node_ip",
"source_ip",
"tag_a",
"tag_b",
"query_source",
"region_code",
"client_agent",
"operation_name",
"site_name",
"endpoint_path",
"http_method",
"response_code",
"scan_category",
"auth_result",
"task_id",
"entity_id",
"alert_tags",
"issue_type",
"filter_result",
"guard_mode",
"record_type",
"resource_path",
"latency_ms",
"org_name",
"threat_flag",
"build_version",
"bin_code",
"payload_size",
"component_name",
"route_key",
"auth_token",
"app_label",
"variant_tag",
"cookie_id",
"status_code",
"lcp_micros",
"inp_micros",
"cls_score",
"device_type",
"page_slug",
"action_category",
"action_subcategory",
"page_url",
"render_scope",
"os_platform",
"attack_name",
"http_request",
"user_agent_str",
"uri_path",
"geo_org",
"geo_country",
"geo_user_type",
"risk_rules_list",
"visitor_session_id",
"bot_flag",
"passthrough_flag",
"order_ref",
"info_tag",
"graphql_operation",
"datacenter"
],
"results": [
[
"Q248 warehouse event record 4",
"stdout",
"PL-005",
"94.6",
"42.5",
"900.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"88",
"1.0",
"90",
"manual",
"500",
"5",
"2",
"30.1",
"BS-2026-A1",
"segment 88 speed anomaly detected",
"ACK batch batchIdList:BT-005-2026 processed",
"POST /api/v2/sorter/scan 201 Created",
"E009",
"@warehouse-iOS-scan-v1",
"UP-E003",
"OverflowException: throughput_rate 999.0 exceeds max capacity",
"{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}",
"[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]",
"[\"cid-abc123\",\"status-ok\"]",
"ArchiveLog",
"10.12.0.105",
"192.168.1.11",
"dev",
"high",
"api",
"AP-CENTRAL",
"axios/1.6.0 (Node.js; warehouse-ui)",
"ScanPallet",
"site-nyc-01",
"/api/v1/archive/log",
"GET",
"201",
"internal",
"fail",
"task-g7h8i9",
"ent-010-wh",
"capacity",
"jam",
"allow",
"disabled",
"scan",
"/data/sorter/output.dat",
"1900",
"warehouse-east",
"false",
"v3.2.0",
"BIN-G7",
"4096",
"sorter-engine",
"rk-warehouse-008",
"tok-wh-yza567bcd890",
"warehouse-scan",
"control",
"sess_abc123",
"200",
"1100000",
"180000",
"0.25",
"Mobile",
"itemPage",
"performanceMetric",
"vitalsInp",
"https://shop.example.com/item/1006",
"SSR",
"Android 13",
"Evasion Technique",
"PUT /api/cart/update",
"Mozilla/5.0 Firefox/121",
"/api/v1/data",
"HostPro Inc",
"BR",
"hosting",
"[\"credential_stuffing\"]",
"sess_001",
"None",
"false",
"ORD-003",
"None",
"updateItems",
"dc-west"
],
[
"Q249 warehouse event record 1",
"stdout",
"PL-007",
"94.6",
"42.5",
"900.0",
"SORT-M3",
"LANE-B",
"ZONE-1",
"CC-DELTA",
"88",
"1.0",
"90",
"auto",
"500",
"5",
"2",
"30.1",
"BS-2026-A1",
"segment 88 speed anomaly detected",
"ACK batch batchIdList:BT-005-2026 processed",
"POST /api/v2/sorter/scan 201 Created",
"E009",
"@warehouse-iOS-scan-v1",
"UP-E003",
"OverflowException: throughput_rate 999.0 exceeds max capacity",
"{\"message\":{\"endpoint\":\"checkThreshold\",\"status\":\"warning\"}}",
"[\"{\\\"name\\\":\\\"scan\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"sort\\\",\\\"startTime\\\":\\\"180\\\"}\", \"{\\\"name\\\":\\\"pack\\\",\\\"startTime\\\":\\\"360\\\"}\"]",
"[\"cid-abc123\",\"status-ok\"]",
"ArchiveLog",
"10.12.0.105",
"192.168.1.11",
"dev",
"high",
"api",
"AP-CENTRAL",
"axios/1.6.0 (Node.js; warehouse-ui)",
"ScanPallet",
"site-nyc-01",
"/api/v1/archive/log",
"GET",
"201",
"internal",
"fail",
"task-g7h8i9",
"ent-010-wh",
"capacity",
"jam",
"allow",
"disabled",
"scan",
"/data/sorter/output.dat",
"1900",
"warehouse-east",
"false",
"v3.2.0",
"BIN-G7",
"4096",
"sorter-engine",
"rk-warehouse-008",
"tok-wh-yza567bcd890",
"warehouse-scan",
"control",
"sess_abc123",
"200",
"1100000",
"180000",
"0.25",
"Mobile",
"itemPage",
"performanceMetric",
"vitalsInp",
"https://shop.example.com/item/1006",
"SSR",
"Android 13",
"Evasion Technique",
"PUT /api/cart/update",
"Mozilla/5.0 Firefox/121",
"/api/v1/data",
"HostPro Inc",
"BR",
"hosting",
"[\"credential_stuffing\"]",
"sess_001",
"None",
"false",
"ORD-003",
"None",
"updateItems",
"dc-west"
],
[
"Q249 warehouse event record 2",
"stderr",
"PL-008",
"45.3",
"58.0",
"150.0",
"SORT-Z9",
"LANE-C",
"ZONE-2",
"CC-ALPHA",
"155",
"1.5",
"1000",
"manual",
"750",
"1",
"3",
"35.7",
"BS-2026-B2",
"track TRK-mno-pqr alignment corrected",
"ACK batch batchIdList:BT-006-2026 queued",
"INFO: batch sync completed, url=http://warehouse.local/sync",
"E010",
"@warehouse-Linux-scan-v3",
"None",
"NullPointerException at ConveyorController.handle()",
"{\"message\":{\"endpoint\":\"archiveLog\",\"status\":\"ok\"}}",
"[\"{\\\"name\\\":\\\"precheck\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"execute\\\",\\\"startTime\\\":\\\"50\\\"}\", \"{\\\"name\\\":\\\"finalize\\\",\\\"startTime\\\":\\\"300\\\"}\"]",
"[\"cid-def456\",\"status-pending\"]",
"RetryScan",
"10.12.1.201",
"192.168.1.12",
"prod",
"medium",
"scheduler",
"US-EAST",
"okhttp/4.12.0 (Android; sort-app)",
"RerouteTrack",
"site-lon-02",
"None",
"POST",
"204",
"inbound",
"denied",
"task-j0k1l2",
"ent-001-wh",
"latency",
"timeout",
"block",
"active",
"sort",
"None",
"15",
"warehouse-west",
"None",
"v1.0.0",
"BIN-H8",
"8192",
"conveyor-driver",
"rk-warehouse-009",
"tok-wh-efg123hij456",
"warehouse-track",
"None",
"var3_stu678",
"500",
"1200000",
"250000",
"0.03",
"Computer",
"searchPage",
"interaction",
"vitalsCls",
"None",
"CSR",
"Mac OS X (iPhone)",
"SQL Injection (Param)",
"DELETE /api/session",
"PostmanRuntime/7.35",
"/swag/graphql",
"CloudServe GmbH",
"US",
"business",
"[\"scraping_pattern\",\"ip_hop\",\"rapid_login\"]",
"sess_004",
"None",
"false",
"ORD-006",
"None",
"placeOrder",
"dc-east"
],
[
"Q249 warehouse event record 3 ACK batch batchIdList:Q249-3",
"stdout",
"PL-001",
"67.9",
"75.3",
"320.0",
"SORT-X1",
"LANE-D",
"ZONE-3",
"CC-BETA",
"410",
"2.0",
"24",
"hybrid",
"1000",
"2",
"4",
"19.2",
"BS-2026-C3",
"batch DEF234 registered at loading dock",
"ACK batch batchIdList:BT-007-2026 dispatched",
"WARN: lane jam detected at conveyor_segment=3",
"E001",
"@warehouse-Windows-scan-v2",
"UP-E005",
"TimeoutException: lane LANE-A did not respond within 5000ms",
"{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}",
"[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]",
"[\"cid-ghi789\",\"status-failed\"]",
"SyncZone",
"10.12.1.202",
"192.168.1.13",
"prod",
"low",
"dashboard",
"US-WEST",
"Alamofire/5.8.0 (iOS; scan-app)",
"MergeBatch",
"site-tok-03",
"/api/v1/zone/sync",
"PUT",
"400",
"inbound",
"pass",
"task-m3n4o5",
"ent-002-wh",
"error",
"overflow",
"allow",
"passive",
"merge",
"/logs/warehouse/error.log",
"12",
"warehouse-north",
"true",
"v1.1.2",
"BIN-I9",
"16384",
"zone-controller",
"rk-warehouse-010",
"tok-wh-klm789nop012",
"warehouse-merge",
"control",
"ctl_vwx901",
"404",
"2500000",
"70000",
"0.15",
"Tablet",
"itemPage",
"performanceMetric",
"clickEvent",
"https://shop.example.com/item/1001",
"SSR",
"Windows 11",
"XSS Reflected (Header)",
"GET /.env",
"Mozilla/5.0 Safari/17.2",
"/ip/192.168.1.1",
"DataCenter EU",
"JP",
"business",
"[\"rate_limit_exceeded\",\"geo_anomaly\"]",
"sess_003",
"None",
"false",
"ORD-007",
"None",
"verifyPayment",
"dc-west"
],
[
"Q249 warehouse event record 4",
"stdout",
"PL-002",
"21.4",
"88.7",
"480.0",
"SORT-A7",
"LANE-A",
"ZONE-4",
"CC-GAMMA",
"275",
"2.5",
"72",
"auto",
"200",
"3",
"5",
"24.8",
"BS-2025-D4",
"batch ABC123 processed successfully",
"ACK batch batchIdList:BT-008-2026 archived",
"ERROR: pallet PL-003 mismatch, retry url=https://warehouse.local/retry",
"E002",
"@warehouse-Android-track-v1",
"None",
"DataIntegrityException: pallet_id PL-002 checksum mismatch",
"{\"message\":{\"endpoint\":\"syncZone\",\"status\":\"syncing\"}}",
"[\"{\\\"name\\\":\\\"load\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"unload\\\",\\\"startTime\\\":\\\"250\\\"}\"]",
"[\"cid-jkl012\",\"status-ok\"]",
"SearchItems",
"10.12.1.203",
"192.168.1.14",
"staging",
"critical",
"cli",
"EU-WEST",
"node-fetch/3.3.2 (tracking-service)",
"CheckThreshold",
"site-syd-04",
"None",
"DELETE",
"404",
"outbound",
"fail",
"task-p6q7r8",
"ent-003-wh",
"capacity",
"mismatch",
"allow",
"active",
"track",
"None",
"45",
"warehouse-south",
"None",
"v2.0.0",
"BIN-J0",
"256",
"scan-hub",
"rk-warehouse-001",
"tok-wh-qrs345tuv678",
"warehouse-sync",
"None",
"sess_def456",
"200",
"1800000",
"160000",
"0.1",
"Mobile",
"itemPage",
"navigation",
"vitalsLcp",
"None",
"SSR",
"Android 14",
"Path Traversal",
"POST /api/login {\"user\":\"admin\"}",
"axios/1.6.0",
"/admin/login",
"Acme Corp",
"US",
"hosting",
"[\"torbot_ua_mismatch\",\"cookie_reuse\"]",
"sess_005",
"None",
"false",
"ORD-008",
"None",
"updateCart",
"dc-east"
],
[
"Q250 warehouse event record 0 ACK batch batchIdList:Q250-0",
"stdout",
"PL-003",
"67.9",
"75.3",
"320.0",
"SORT-M3",
"LANE-B",
"ZONE-1",
"CC-DELTA",
"410",
"2.0",
"24",
"manual",
"1000",
"2",
"4",
"19.2",
"BS-2026-C3",
"batch DEF234 registered at loading dock",
"ACK batch batchIdList:BT-007-2026 dispatched",
"WARN: lane jam detected at conveyor_segment=3",
"E001",
"@warehouse-Windows-scan-v2",
"UP-E005",
"TimeoutException: lane LANE-A did not respond within 5000ms",
"{\"message\":{\"endpoint\":\"retryScan\",\"status\":\"retrying\"}}",
"[\"{\\\"name\\\":\\\"queue\\\",\\\"startTime\\\":\\\"0\\\"}\", \"{\\\"name\\\":\\\"dequeue\\\",\\\"startTime\\\":\\\"70\\\"}\", \"{\\\"name\\\":\\\"dispatch\\\",\\\"startTime\\\":\\\"140\\\"}\"]",
"[\"cid-ghi789\",\"status-failed\"]",
"SyncZone",
"10.12.1.202",
"192.168.1.13",
"prod",
"low",
"dashboard",
"US-WEST",
"Alamofire/5.8.0 (iOS; scan-app)",
"MergeBatch",
"site-tok-03",
"/api/v1/zone/sync",
"PUT",
"400",
"inbound",
"pass",
"task-m3n4o5",
"ent-002-wh",
"error",
"overflow",
"allow",
"passive",
"merge",
"/logs/warehouse/error.log",
"12",
"warehouse-north",
"true",
"v1.1.2",
"BIN-I9",
"16384",
"zone-controller",
"rk-warehouse-010",
"tok-wh-klm789nop012",
"warehouse-merge",
"control",
"ctl_vwx901",
"404",
"2500000",
"70000",
"0.15",
"Tablet",
"itemPage",
"performanceMetric",
"clickEvent",
"https://shop.example.com/item/1001",
"SSR",
"Windows 11",
"XSS Reflected (Header)",
"GET /.env",
"Mozilla/5.0 Safari/17.2",
"/ip/192.168.1.1",
"DataCenter EU",
"JP",
"business",
"[\"rate_limit_exceeded\",\"geo_anomaly\"]",
"sess_003",
"None",
"false",
"ORD-007",
"None",
"verifyPayment",
"dc-west"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q250",
"sql": "SELECT _timestamp, visitor_session_id, action_category, bot_flag, info_tag FROM \"{stream}\" WHERE action_category NOT IN ('interaction', 'navigation') AND page_slug IN ('itemPage', 'cartPage') AND bot_flag IS NULL AND org_name = 'warehouse-east'",
"category": "basic_select",
"time_offset": {
"start_offset": 14939000000,
"end_offset": 15013000000
},
"expected": {
"columns": [
"visitor_session_id",
"action_category",
"bot_flag",
"info_tag"
],
"results": [
[
"sess_001",
"performanceMetric",
"None",
"None"
],
[
"sess_001",
"performanceMetric",
"None",
"None"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q416",
"sql": "SELECT _timestamp, COALESCE(page_url, endpoint_path, resource_path, page_slug) AS resolved_page, action_category, latency_ms FROM \"{stream}\" WHERE action_category = 'interaction' ORDER BY latency_ms DESC, _timestamp ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 24899000000,
"end_offset": 24973000000
},
"expected": {
"columns": [
"resolved_page",
"action_category",
"latency_ms"
],
"results": [
[
"https://shop.example.com/item/1007",
"interaction",
"15"
],
[
"https://shop.example.com/item/1007",
"interaction",
"15"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q417",
"sql": "SELECT _timestamp, CASE WHEN page_url IS NOT NULL THEN page_url WHEN endpoint_path IS NOT NULL THEN endpoint_path WHEN resource_path IS NOT NULL THEN resource_path ELSE CONCAT('fallback:', page_slug) END AS best_url, visitor_session_id FROM \"{stream}\" WHERE action_category IN ('navigation', 'interaction') ORDER BY _timestamp DESC LIMIT 15",
"category": "basic_select",
"time_offset": {
"start_offset": 24959000000,
"end_offset": 25033000000
},
"expected": {
"columns": [
"best_url",
"visitor_session_id"
],
"results": [
[
"https://shop.example.com/item/1002",
"sess_005"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q418",
"sql": "SELECT _timestamp, component_name, exception_message FROM \"{stream}\" WHERE (exception_message LIKE '%Exception%' OR exception_message LIKE '%Timeout%' OR exception_message LIKE '%Overflow%') AND component_name LIKE '%engine%' ORDER BY _timestamp ASC",
"category": "basic_select",
"time_offset": {
"start_offset": 25019000000,
"end_offset": 25093000000
},
"expected": {
"columns": [
"component_name",
"exception_message"
],
"results": [
[
"sorter-engine",
"OverflowException: throughput_rate 999.0 exceeds max capacity"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q419",
"sql": "SELECT _timestamp, pallet_id, sorter_model, facility_zone, throughput_rate FROM \"{stream}\" WHERE pallet_id IN ('PL-001', 'PL-003', 'PL-005', 'PL-007') AND sorter_model IN ('SORT-X1', 'SORT-M3', 'SORT-Q5') AND throughput_rate > 0 AND facility_zone IS NOT NULL ORDER BY throughput_rate DESC, pallet_id ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 25079000000,
"end_offset": 25153000000
},
"expected": {
"columns": [
"pallet_id",
"sorter_model",
"facility_zone",
"throughput_rate"
],
"results": [
[
"PL-001",
"SORT-X1",
"ZONE-3",
"900.0"
],
[
"PL-007",
"SORT-M3",
"ZONE-1",
"900.0"
],
[
"PL-003",
"SORT-M3",
"ZONE-1",
"320.0"
],
[
"PL-005",
"SORT-X1",
"ZONE-3",
"320.0"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q420",
"sql": "SELECT _timestamp, (_timestamp / 1000000) AS ts_seconds, (_timestamp % 60000000) AS within_minute, action_category, page_slug FROM \"{stream}\" WHERE action_category = 'performanceMetric' ORDER BY _timestamp ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 25139000000,
"end_offset": 25213000000
},
"expected": {
"columns": [
"ts_seconds",
"within_minute",
"action_category",
"page_slug"
],
"results": [
[
"1780750500.0",
"0",
"performanceMetric",
"itemPage"
],
[
"1780750536.0",
"36000000",
"performanceMetric",
"searchPage"
],
[
"1780750554.0",
"54000000",
"performanceMetric",
"cartPage"
],
[
"1780750560.0",
"0",
"performanceMetric",
"cartPage"
],
[
"1780750572.0",
"12000000",
"performanceMetric",
"itemPage"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q421",
"sql": "SELECT _timestamp, alert_tags, auth_token, bin_code, action_category FROM \"{stream}\" WHERE alert_tags IN ('latency', 'error', 'capacity') AND bin_code LIKE 'BIN-%' AND action_category = 'performanceMetric' ORDER BY alert_tags ASC, _timestamp ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 25199000000,
"end_offset": 25273000000
},
"expected": {
"columns": [
"alert_tags",
"auth_token",
"bin_code",
"action_category"
],
"results": [
[
"capacity",
"tok-wh-abc123def456",
"BIN-C3",
"performanceMetric"
],
[
"capacity",
"tok-wh-abc123def456",
"BIN-C3",
"performanceMetric"
],
[
"error",
"tok-wh-cde567fgh890",
"BIN-B2",
"performanceMetric"
],
[
"latency",
"tok-wh-ghi789jkl012",
"BIN-D4",
"performanceMetric"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q422",
"sql": "SELECT _timestamp, client_agent, geo_org, geo_country, action_category FROM \"{stream}\" WHERE geo_org IS NOT NULL ORDER BY geo_org ASC, _timestamp ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 25259000000,
"end_offset": 25333000000
},
"expected": {
"columns": [
"client_agent",
"geo_org",
"geo_country",
"action_category"
],
"results": [
[
"Go-http-client/2.0 conveyor-monitor",
"Acme Corp",
"UK",
"interaction"
],
[
"okhttp/4.12.0 (Android; sort-app)",
"CloudServe GmbH",
"US",
"interaction"
],
[
"okhttp/4.12.0 (Android; sort-app)",
"CloudServe GmbH",
"US",
"interaction"
],
[
"Alamofire/5.8.0 (iOS; scan-app)",
"DataCenter EU",
"JP",
"performanceMetric"
],
[
"axios/1.6.0 (Node.js; warehouse-ui)",
"HostPro Inc",
"BR",
"performanceMetric"
],
[
"PostmanRuntime/7.35.0",
"NetGuard AS",
"US",
"navigation"
],
[
"PostmanRuntime/7.35.0",
"NetGuard AS",
"US",
"navigation"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q423",
"sql": "SELECT _timestamp, guard_mode, inp_micros, cls_score, device_type FROM \"{stream}\" WHERE guard_mode IN ('active', 'passive') AND inp_micros > 100000 AND cls_score > 0.05 AND device_type = 'Mobile' ORDER BY inp_micros DESC, _timestamp ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 25319000000,
"end_offset": 25393000000
},
"expected": {
"columns": [
"guard_mode",
"inp_micros",
"cls_score",
"device_type"
],
"results": [
[
"active",
"160000",
"0.1",
"Mobile"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q424",
"sql": "SELECT _timestamp, operation_name, payload_size, route_key, response_code FROM \"{stream}\" WHERE operation_name IS NOT NULL AND payload_size > 256 ORDER BY payload_size DESC, operation_name ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 25379000000,
"end_offset": 25453000000
},
"expected": {
"columns": [
"operation_name",
"payload_size",
"route_key",
"response_code"
],
"results": [
[
"RetryScan",
"65536",
"rk-warehouse-003",
"503"
],
[
"RetryScan",
"65536",
"rk-warehouse-003",
"503"
],
[
"ArchiveLog",
"32768",
"rk-warehouse-002",
"500"
],
[
"UpdateBatch",
"1024",
"rk-warehouse-006",
"200"
],
[
"SearchItems",
"512",
"rk-warehouse-005",
"403"
],
[
"SearchItems",
"512",
"rk-warehouse-005",
"403"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q425",
"sql": "SELECT _timestamp, query_source, render_scope, route_key, site_name FROM \"{stream}\" WHERE query_source IN ('dashboard', 'api', 'cli') AND render_scope IN ('SSR', 'CSR') AND site_name LIKE 'site-%' ORDER BY query_source ASC, site_name ASC, _timestamp DESC LIMIT 12",
"category": "basic_select",
"time_offset": {
"start_offset": 25439000000,
"end_offset": 25513000000
},
"expected": {
"columns": [
"query_source",
"render_scope",
"route_key",
"site_name"
],
"results": [
[
"api",
"SSR",
"rk-warehouse-008",
"site-nyc-01"
],
[
"api",
"SSR",
"rk-warehouse-008",
"site-nyc-01"
],
[
"cli",
"SSR",
"rk-warehouse-005",
"site-sin-08"
],
[
"cli",
"CSR",
"rk-warehouse-007",
"site-tor-10"
],
[
"dashboard",
"SSR",
"rk-warehouse-006",
"site-mum-09"
],
[
"dashboard",
"SSR",
"rk-warehouse-006",
"site-mum-09"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q426",
"sql": "SELECT _timestamp, array_extract(regexp_match(client_agent, '([A-Za-z]+)/[0-9.]+'), 1) AS agent_family, action_category, page_slug FROM \"{stream}\" WHERE client_agent IS NOT NULL AND action_category = 'navigation' ORDER BY agent_family ASC, _timestamp ASC LIMIT 10",
"category": "basic_select",
"time_offset": {
"start_offset": 25499000000,
"end_offset": 25573000000
},
"expected": {
"columns": [
"agent_family",
"action_category",
"page_slug"
],
"results": [
[
"fetch",
"navigation",
"itemPage"
],
[
"fetch",
"navigation",
"itemPage"
]
],
"results_mode": "rowsort"
}
},
{
"id": "Q427",
"sql": "SELECT _timestamp, action_category, (CASE WHEN page_url IS NULL AND endpoint_path IS NULL THEN 'both_missing' WHEN page_url IS NULL THEN 'only_page_url_missing' WHEN endpoint_path IS NULL THEN 'only_endpoint_missing' ELSE 'both_present' END) AS url_status FROM \"{stream}\" WHERE action_category IN ('performanceMetric', 'interaction') ORDER BY url_status, _timestamp ASC LIMIT 15",
"category": "basic_select",
"time_offset": {
"start_offset": 25559000000,
"end_offset": 25633000000
},
"expected": {
"columns": [
"action_category",
"url_status"
],
"results": [
[
"performanceMetric",
"both_missing"
],
[
"performanceMetric",
"both_missing"
],
[
"performanceMetric",
"both_missing"
],
[
"performanceMetric",
"both_present"
],
[
"performanceMetric",
"both_present"
],
[
"performanceMetric",
"both_present"
]
],
"results_mode": "rowsort"
}
}
],
"last_query_id": 35
}