# Splunk schema ERD

Table and field reference for the Fivetran Splunk connector.

## Table & Field Reference

### input

| Column | Type | Keys |
| --- | --- | --- |
| name | String | PK |
| index | String | FK |
| disabled | Boolean |  |
| host | String |  |
| source | String |  |
| source_type | String |  |
| updated | Instant |  |

### event

| Column | Type | Keys |
| --- | --- | --- |
| _fivetran_id | String | PK |
| index | String | FK |
| host | String |  |
| line_count | Long |  |
| source | String |  |
| source_type | String |  |
| time | Instant |  |

### index

| Column | Type | Keys |
| --- | --- | --- |
| name | String | PK |
| block_sign_size | Long |  |
| cold_path | String |  |
| cold_path_expanded | String |  |
| cold_to_frozen_dir | String |  |
| cold_to_frozen_script | String |  |
| current_dbsize_mb | Long |  |
| datatype | String |  |
| default_database | String |  |
| disabled | Boolean |  |
| enable_realtime_search | Boolean |  |
| frozen_time_period_in_secs | Long |  |
| home_path | String |  |
| home_path_expanded | String |  |
| is_internal | Boolean |  |
| is_ready | Boolean |  |
| max_concurrent_optimizes | Long |  |
| max_data_size | String |  |
| max_hot_buckets | String |  |
| max_hot_idle_secs | Long |  |
| max_hot_span_secs | Long |  |
| max_meta_entries | Long |  |
| max_time | Instant |  |
| max_total_data_size_mb | Long |  |
| max_warm_db_count | Long |  |
| mim_raw_file_sync_secs | String |  |
| min_time | Instant |  |
| partial_service_meta_period | Long |  |
| quarantine_future_secs | Long |  |
| quarantine_past_secs | Long |  |
| raw_chunk_size_bytes | Long |  |
| rotate_period_in_secs | Long |  |
| service_meta_period | Long |  |
| summarize | Boolean |  |
| sync_meta | Boolean |  |
| thawed_path | String |  |
| thawed_path_expanded | String |  |
| throttle_check_period | Long |  |
| total_event_count | Long |  |
| updated | Instant |  |

## Relationships

- input(index) → index(name)
- event(index) → index(name)