- 19 Sep 2023
- 3 Minutes to read
Google BigQuery - Send to Table
- Updated on 19 Sep 2023
- 3 Minutes to read
Google BigQuery - Send to Table inserts the entities retrieved from the saved query supplied as a trigger (or devices that have been selected in the asset table) to the supplied Google BigQuery table. When used with a saved query as a trigger, only the fields configured in the saved query are inserted to the supplied table.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
- Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
- Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
- Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
- A query only returns results for the asset type it was created for.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs, Adapter Fetch History and Asset Investigation Modules
- See Actions supported for Vulnerabilities.
- See Actions supported for Software.
- Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
- Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
These fields must be configured to run the Enforcement Set.
Click to view Required Fields
- Table name - The table name.
- If the table name already exists, new records will be added to that table. If the table schema does not match the query columns, the insertion will fail.
- If the table name does not exist, a new table will be created and new records will be added to that table. The table schema will be determined based on the query columns.
- Project ID - Project ID where the specified table will created.
- Dataset ID - Dataset ID where the specified table will created.
- JSON Key pair for the service account authentication - A JSON-document containing service-account credentials to GCP, For details, see Connect Axonius to Google Cloud Platform.
- Append or override the table (default: Override) - Select whether to override the table data or to append the table, if already exists, and add new records to it.
- Partitioning (default: No partitioning) - Select whether to create a partitioned table for the inserted data:
If No partitioning is selected, the table won't be partitioned.
If Partition by ingestion time is selected:
- The table will be partitioned by calendar days.
- Select whether a partition filter is required. Requiring a partition filter means users must include a WHERE clause that specifies the partitions to query. Using a partition filter may reduce cost and improve performance.
- The Partition type and Partitioning filter fields can be found after the Map Axonius fields to Google BigQuery fields field.
Instance Name - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.
These fields are optional.
Click to view Additional Fields
Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
HTTPS proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
HTTPS proxy User Name - The user name to use when connecting to the server using the HTTPS Proxy.
HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.
Map Axonius fields to Google BigQuery fields (optional, default: empty) - Use the Field Mapping Wizard to map Axonius fields to fields in Google BigQuery. In this way you can transfer data found in Axonius into Google BigQuery. The wizard shows you which fields exist on the Axonius system, allowing you to map them easily.NOTE
For details, see Axonius to External Field Mapping.
For more details about other Enforcement Actions available, see Action Library.