diff --git a/HBase最新建表语句/Phoenix建表语句_TSG b/HBase最新建表语句/Phoenix建表语句_TSG
index 1da9bce..2b144cd 100644
--- a/HBase最新建表语句/Phoenix建表语句_TSG
+++ b/HBase最新建表语句/Phoenix建表语句_TSG
@@ -8,246 +8,310 @@ ROWKEY VARCHAR PRIMARY KEY,
 "common"."client_ip_list" VARCHAR,
 "common"."last_update_time" UNSIGNED_LONG);
 
+CREATE view IF NOT EXISTS "tsg_galaxy"."gtpc_knowledge_base"(
+ROWKEY VARCHAR PRIMARY KEY,
+"gtp"."uplink_teid" UNSIGNED_LONG,
+"gtp"."downlink_teid" UNSIGNED_LONG,
+"gtp"."apn" VARCHAR,
+"gtp"."phone_number" VARCHAR,
+"gtp"."imsi" VARCHAR,
+"gtp"."imei" VARCHAR,
+"gtp"."last_update_time" UNSIGNED_LONG,
+"gtp"."msg_type" UNSIGNED_INT);
+
 CREATE schema IF NOT EXISTS "tsg_galaxy";
+
 CREATE table IF NOT EXISTS "tsg_galaxy"."job_result"(
 ROWKEY VARCHAR PRIMARY KEY,
+"detail"."is_error" BOOLEAN,
+"detail"."is_canceled" BOOLEAN,
 "detail"."is_done" BOOLEAN,
 "detail"."done_progress" UNSIGNED_FLOAT,
-"detail"."is_canceled" BOOLEAN,
-"detail"."discovery_field" VARCHAR,
 "detail"."last_query_time" UNSIGNED_LONG,
-"detail"."count" UNSIGNED_LONG,
 "detail"."duration_time" UNSIGNED_LONG,
-"detail"."is_error" BOOLEAN,
-"result"."app_extra_info" VARCHAR,
-"result"."attack_type" VARCHAR,
-"result"."bit_rate" VARCHAR,
-"result"."common_action" VARCHAR,
-"result"."common_address_type" VARCHAR,
-"result"."common_app_label" VARCHAR,
-"result"."common_c2s_byte_diff" VARCHAR,
-"result"."common_c2s_byte_num" VARCHAR,
-"result"."common_c2s_byte_retrans" VARCHAR,
-"result"."common_c2s_ipfrag_num" VARCHAR,
-"result"."common_c2s_pkt_diff" VARCHAR,
-"result"."common_c2s_pkt_num" VARCHAR,
-"result"."common_c2s_pkt_retrans" VARCHAR,
-"result"."common_c2s_tcp_lostlen" VARCHAR,
-"result"."common_c2s_tcp_unorder_num" VARCHAR,
-"result"."common_client_asn" VARCHAR,
-"result"."common_client_ip" VARCHAR,
-"result"."common_client_location" VARCHAR,
-"result"."common_client_port" VARCHAR,
-"result"."common_con_duration_ms" VARCHAR,
-"result"."common_data_center" VARCHAR,
-"result"."common_device_group" VARCHAR,
-"result"."common_device_id" VARCHAR,
-"result"."common_direction" VARCHAR,
-"result"."common_end_time" VARCHAR,
-"result"."common_establish_latency_ms" VARCHAR,
-"result"."common_external_ip" VARCHAR,
-"result"."common_imei" VARCHAR,
-"result"."common_imsi" VARCHAR,
-"result"."common_internal_ip" VARCHAR,
-"result"."common_l4_protocol" VARCHAR,
-"result"."common_l7_protocol" VARCHAR,
-"result"."common_mirrored_bytes" VARCHAR,
-"result"."common_mirrored_pkts" VARCHAR,
-"result"."common_phone_number" VARCHAR,
-"result"."common_policy_id" VARCHAR,
-"result"."common_protocol_label" VARCHAR,
-"result"."common_s2c_byte_diff" VARCHAR,
-"result"."common_s2c_byte_num" VARCHAR,
-"result"."common_s2c_byte_retrans" VARCHAR,
-"result"."common_s2c_ipfrag_num" VARCHAR,
-"result"."common_s2c_pkt_diff" VARCHAR,
-"result"."common_s2c_pkt_num" VARCHAR,
-"result"."common_s2c_pkt_retrans" VARCHAR,
-"result"."common_s2c_tcp_lostlen" VARCHAR,
-"result"."common_s2c_tcp_unorder_num" VARCHAR,
-"result"."common_schema_type" VARCHAR,
-"result"."common_server_asn" VARCHAR,
-"result"."common_server_ip" VARCHAR,
-"result"."common_server_location" VARCHAR,
-"result"."common_server_port" VARCHAR,
-"result"."common_service_category" VARCHAR,
-"result"."common_sessions" VARCHAR,
-"result"."common_sled_ip" VARCHAR,
-"result"."common_start_time" VARCHAR,
-"result"."common_stream_dir" VARCHAR,
-"result"."common_stream_error" VARCHAR,
-"result"."common_stream_trace_id" VARCHAR,
-"result"."common_sub_action" VARCHAR,
-"result"."common_subscriber_id" VARCHAR,
-"result"."common_tcp_client_isn" VARCHAR,
-"result"."common_tcp_server_isn" VARCHAR,
-"result"."common_tunnels" VARCHAR,
-"result"."common_userdefine_app_name" VARCHAR,
-"result"."conditions" VARCHAR,
-"result"."destination_country" VARCHAR,
-"result"."destination_ip" VARCHAR,
-"result"."dns_aa" VARCHAR,
-"result"."dns_ancount" VARCHAR,
-"result"."dns_arcount" VARCHAR,
-"result"."dns_message_id" VARCHAR,
-"result"."dns_nscount" VARCHAR,
-"result"."dns_opcode" VARCHAR,
-"result"."dns_qclass" VARCHAR,
-"result"."dns_qdcount" VARCHAR,
-"result"."dns_qname" VARCHAR,
-"result"."dns_qr" VARCHAR,
-"result"."dns_qtype" VARCHAR,
-"result"."dns_ra" VARCHAR,
-"result"."dns_rcode" VARCHAR,
-"result"."dns_rd" VARCHAR,
-"result"."dns_sub" VARCHAR,
-"result"."dns_tc" VARCHAR,
-"result"."doh_aa" VARCHAR,
-"result"."doh_ancount" VARCHAR,
-"result"."doh_arcount" VARCHAR,
-"result"."doh_cname" VARCHAR,
-"result"."doh_cookie" VARCHAR,
-"result"."doh_host" VARCHAR,
-"result"."doh_message_id" VARCHAR,
-"result"."doh_nscount" VARCHAR,
-"result"."doh_opcode" VARCHAR,
-"result"."doh_qclass" VARCHAR,
-"result"."doh_qdcount" VARCHAR,
-"result"."doh_qname" VARCHAR,
-"result"."doh_qr" VARCHAR,
-"result"."doh_qtype" VARCHAR,
-"result"."doh_ra" VARCHAR,
-"result"."doh_rcode" VARCHAR,
-"result"."doh_rd" VARCHAR,
-"result"."doh_referer" VARCHAR,
-"result"."doh_rr" VARCHAR,
-"result"."doh_sub" VARCHAR,
-"result"."doh_tc" VARCHAR,
-"result"."doh_url" VARCHAR,
-"result"."doh_user_agent" VARCHAR,
-"result"."doh_version" VARCHAR,
-"result"."ftp_account" VARCHAR,
-"result"."ftp_content" VARCHAR,
-"result"."ftp_link_type" VARCHAR,
-"result"."ftp_url" VARCHAR,
-"result"."gtp_apn" VARCHAR,
-"result"."gtp_downlink_teid" VARCHAR,
-"result"."gtp_end_user_ipv4" VARCHAR,
-"result"."gtp_end_user_ipv6" VARCHAR,
-"result"."gtp_imei" VARCHAR,
-"result"."gtp_imsi" VARCHAR,
-"result"."gtp_msg_type" VARCHAR,
-"result"."gtp_phone_number" VARCHAR,
-"result"."gtp_uplink_teid" VARCHAR,
-"result"."gtp_version" VARCHAR,
-"result"."http_action_file_size" VARCHAR,
-"result"."http_cookie" VARCHAR,
-"result"."http_domain" VARCHAR,
-"result"."http_host" VARCHAR,
-"result"."http_referer" VARCHAR,
-"result"."http_request_body" VARCHAR,
-"result"."http_request_content_length" VARCHAR,
-"result"."http_request_content_type" VARCHAR,
-"result"."http_request_header" VARCHAR,
-"result"."http_response_body" VARCHAR,
-"result"."http_response_content_length" VARCHAR,
-"result"."http_response_content_type" VARCHAR,
-"result"."http_response_header" VARCHAR,
-"result"."http_response_latency_ms" VARCHAR,
-"result"."http_session_duration_ms" VARCHAR,
-"result"."http_set_cookie" VARCHAR,
-"result"."http_url" VARCHAR,
-"result"."http_user_agent" VARCHAR,
-"result"."http_version" VARCHAR,
-"result"."mail_account" VARCHAR,
-"result"."mail_attachment_name" VARCHAR,
-"result"."mail_bcc" VARCHAR,
-"result"."mail_cc" VARCHAR,
-"result"."mail_eml_file" VARCHAR,
-"result"."mail_from" VARCHAR,
-"result"."mail_from_cmd" VARCHAR,
-"result"."mail_protocol_type" VARCHAR,
-"result"."mail_subject" VARCHAR,
-"result"."mail_to" VARCHAR,
-"result"."mail_to_cmd" VARCHAR,
-"result"."packet_rate" VARCHAR,
-"result"."quic_sni" VARCHAR,
-"result"."quic_user_agent" VARCHAR,
-"result"."quic_version" VARCHAR,
-"result"."radius_account" VARCHAR,
-"result"."radius_acct_authentic" VARCHAR,
-"result"."radius_acct_delay_time" VARCHAR,
-"result"."radius_acct_input_octets" VARCHAR,
-"result"."radius_acct_input_packets" VARCHAR,
-"result"."radius_acct_interim_interval" VARCHAR,
-"result"."radius_acct_link_count" VARCHAR,
-"result"."radius_acct_multi_session_id" VARCHAR,
-"result"."radius_acct_output_octets" VARCHAR,
-"result"."radius_acct_output_packets" VARCHAR,
-"result"."radius_acct_session_id" VARCHAR,
-"result"."radius_acct_session_time" VARCHAR,
-"result"."radius_acct_status_type" VARCHAR,
-"result"."radius_acct_terminate_cause" VARCHAR,
-"result"."radius_callback_id" VARCHAR,
-"result"."radius_callback_number" VARCHAR,
-"result"."radius_called_station_id" VARCHAR,
-"result"."radius_calling_station_id" VARCHAR,
-"result"."radius_event_timestamp" VARCHAR,
-"result"."radius_framed_ip" VARCHAR,
-"result"."radius_framed_protocol" VARCHAR,
-"result"."radius_idle_timeout" VARCHAR,
-"result"."radius_nas_ip" VARCHAR,
-"result"."radius_nas_port" VARCHAR,
-"result"."radius_packet_type" VARCHAR,
-"result"."radius_service_type" VARCHAR,
-"result"."radius_session_timeout" VARCHAR,
-"result"."radius_termination_action" VARCHAR,
-"result"."rtp_originator_dir" VARCHAR,
-"result"."rtp_payload_type_c2s" VARCHAR,
-"result"."rtp_payload_type_s2c" VARCHAR,
-"result"."rtp_pcap_path" VARCHAR,
-"result"."session_rate" VARCHAR,
-"result"."severity" VARCHAR,
-"result"."sip_bye" VARCHAR,
-"result"."sip_call_id" VARCHAR,
-"result"."sip_duration" VARCHAR,
-"result"."sip_originator_description" VARCHAR,
-"result"."sip_originator_sdp_connect_ip" VARCHAR,
-"result"."sip_originator_sdp_content" VARCHAR,
-"result"."sip_originator_sdp_media_port" VARCHAR,
-"result"."sip_originator_sdp_media_type" VARCHAR,
-"result"."sip_responder_description" VARCHAR,
-"result"."sip_responder_sdp_connect_ip" VARCHAR,
-"result"."sip_responder_sdp_content" VARCHAR,
-"result"."sip_responder_sdp_media_port" VARCHAR,
-"result"."sip_responder_sdp_media_type" VARCHAR,
-"result"."sip_server" VARCHAR,
-"result"."sip_user_agent" VARCHAR,
-"result"."source_country_list" VARCHAR,
-"result"."source_ip_list" VARCHAR,
-"result"."ssh_auth_success" VARCHAR,
-"result"."ssh_cipher_alg" VARCHAR,
-"result"."ssh_client_version" VARCHAR,
-"result"."ssh_compression_alg" VARCHAR,
-"result"."ssh_hassh" VARCHAR,
-"result"."ssh_host_key" VARCHAR,
-"result"."ssh_host_key_alg" VARCHAR,
-"result"."ssh_kex_alg" VARCHAR,
-"result"."ssh_mac_alg" VARCHAR,
-"result"."ssh_server_version" VARCHAR,
-"result"."ssh_version" VARCHAR,
-"result"."ssl_cert_issuer" VARCHAR,
-"result"."ssl_cert_subject" VARCHAR,
-"result"."ssl_cert_verify" VARCHAR,
-"result"."ssl_client_side_latency" VARCHAR,
-"result"."ssl_client_side_version" VARCHAR,
-"result"."ssl_cn" VARCHAR,
-"result"."ssl_con_latency_ms" VARCHAR,
-"result"."ssl_error" VARCHAR,
-"result"."ssl_intercept_state" VARCHAR,
-"result"."ssl_ja3_hash" VARCHAR,
-"result"."ssl_pinningst" VARCHAR,
-"result"."ssl_san" VARCHAR,
-"result"."ssl_server_side_latency" VARCHAR,
-"result"."ssl_server_side_version" VARCHAR,
-"result"."ssl_sni" VARCHAR);
+"detail"."count" UNSIGNED_LONG,
+"detail"."job_property" VARCHAR,
+"statistics"."result" VARCHAR,
+"field_discovery"."common_recv_time" VARCHAR,
+"field_discovery"."common_log_id" VARCHAR,
+"field_discovery"."common_policy_id" VARCHAR,
+"field_discovery"."common_namespace_id" VARCHAR,
+"field_discovery"."common_subscriber_id" VARCHAR,
+"field_discovery"."common_imei" VARCHAR,
+"field_discovery"."common_imsi" VARCHAR,
+"field_discovery"."common_phone_number" VARCHAR,
+"field_discovery"."common_client_ip" VARCHAR,
+"field_discovery"."common_client_port" VARCHAR,
+"field_discovery"."common_internal_ip" VARCHAR,
+"field_discovery"."common_l4_protocol" VARCHAR,
+"field_discovery"."common_address_type" VARCHAR,
+"field_discovery"."common_server_ip" VARCHAR,
+"field_discovery"."common_server_port" VARCHAR,
+"field_discovery"."common_external_ip" VARCHAR,
+"field_discovery"."common_action" VARCHAR,
+"field_discovery"."common_direction" VARCHAR,
+"field_discovery"."common_entrance_id" VARCHAR,
+"field_discovery"."common_sled_ip" VARCHAR,
+"field_discovery"."common_client_location" VARCHAR,
+"field_discovery"."common_client_asn" VARCHAR,
+"field_discovery"."common_server_location" VARCHAR,
+"field_discovery"."common_server_asn" VARCHAR,
+"field_discovery"."common_sessions" VARCHAR,
+"field_discovery"."common_c2s_pkt_num" VARCHAR,
+"field_discovery"."common_s2c_pkt_num" VARCHAR,
+"field_discovery"."common_c2s_byte_num" VARCHAR,
+"field_discovery"."common_s2c_byte_num" VARCHAR,
+"field_discovery"."common_c2s_pkt_diff" VARCHAR,
+"field_discovery"."common_s2c_pkt_diff" VARCHAR,
+"field_discovery"."common_c2s_byte_diff" VARCHAR,
+"field_discovery"."common_s2c_byte_diff" VARCHAR,
+"field_discovery"."common_service" VARCHAR,
+"field_discovery"."common_schema_type" VARCHAR,
+"field_discovery"."common_user_tags" VARCHAR,
+"field_discovery"."common_sub_action" VARCHAR,
+"field_discovery"."common_user_region" VARCHAR,
+"field_discovery"."common_device_id" VARCHAR,
+"field_discovery"."common_egress_link_id" VARCHAR,
+"field_discovery"."common_ingress_link_id" VARCHAR,
+"field_discovery"."common_isp" VARCHAR,
+"field_discovery"."common_device_tag" VARCHAR,
+"field_discovery"."common_data_center" VARCHAR,
+"field_discovery"."common_device_group" VARCHAR,
+"field_discovery"."common_app_behavior" VARCHAR,
+"field_discovery"."common_encapsulation" VARCHAR,
+"field_discovery"."common_app_label" VARCHAR,
+"field_discovery"."common_tunnels" VARCHAR,
+"field_discovery"."common_protocol_label" VARCHAR,
+"field_discovery"."common_app_id" VARCHAR,
+"field_discovery"."common_userdefine_app_name" VARCHAR,
+"field_discovery"."common_app_identify_info" VARCHAR,
+"field_discovery"."common_app_surrogate_id" VARCHAR,
+"field_discovery"."common_service_category" VARCHAR,
+"field_discovery"."common_l7_protocol" VARCHAR,
+"field_discovery"."common_start_time" VARCHAR,
+"field_discovery"."common_end_time" VARCHAR,
+"field_discovery"."common_establish_latency_ms" VARCHAR,
+"field_discovery"."common_con_duration_ms" VARCHAR,
+"field_discovery"."common_stream_dir" VARCHAR,
+"field_discovery"."common_address_list" VARCHAR,
+"field_discovery"."common_has_dup_traffic" VARCHAR,
+"field_discovery"."common_stream_error" VARCHAR,
+"field_discovery"."common_stream_trace_id" VARCHAR,
+"field_discovery"."common_link_info_c2s" VARCHAR,
+"field_discovery"."common_link_info_s2c" VARCHAR,
+"field_discovery"."common_packet_capture_file" VARCHAR,
+"field_discovery"."common_c2s_ipfrag_num" VARCHAR,
+"field_discovery"."common_s2c_ipfrag_num" VARCHAR,
+"field_discovery"."common_c2s_tcp_lostlen" VARCHAR,
+"field_discovery"."common_s2c_tcp_lostlen" VARCHAR,
+"field_discovery"."common_c2s_tcp_unorder_num" VARCHAR,
+"field_discovery"."common_s2c_tcp_unorder_num" VARCHAR,
+"field_discovery"."common_c2s_pkt_retrans" VARCHAR,
+"field_discovery"."common_s2c_pkt_retrans" VARCHAR,
+"field_discovery"."common_c2s_byte_retrans" VARCHAR,
+"field_discovery"."common_s2c_byte_retrans" VARCHAR,
+"field_discovery"."common_tcp_client_isn" VARCHAR,
+"field_discovery"."common_tcp_server_isn" VARCHAR,
+"field_discovery"."common_first_ttl" VARCHAR,
+"field_discovery"."common_processing_time" VARCHAR,
+"field_discovery"."common_ingestion_time" VARCHAR,
+"field_discovery"."common_mirrored_pkts" VARCHAR,
+"field_discovery"."common_mirrored_bytes" VARCHAR,
+"field_discovery"."http_url" VARCHAR,
+"field_discovery"."http_host" VARCHAR,
+"field_discovery"."http_domain" VARCHAR,
+"field_discovery"."http_request_line" VARCHAR,
+"field_discovery"."http_response_line" VARCHAR,
+"field_discovery"."http_request_header" VARCHAR,
+"field_discovery"."http_response_header" VARCHAR,
+"field_discovery"."http_request_content" VARCHAR,
+"field_discovery"."http_request_content_length" VARCHAR,
+"field_discovery"."http_request_content_type" VARCHAR,
+"field_discovery"."http_response_content" VARCHAR,
+"field_discovery"."http_response_content_length" VARCHAR,
+"field_discovery"."http_response_content_type" VARCHAR,
+"field_discovery"."http_request_body" VARCHAR,
+"field_discovery"."http_response_body" VARCHAR,
+"field_discovery"."http_request_body_key" VARCHAR,
+"field_discovery"."http_response_body_key" VARCHAR,
+"field_discovery"."http_proxy_flag" VARCHAR,
+"field_discovery"."http_sequence" VARCHAR,
+"field_discovery"."http_snapshot" VARCHAR,
+"field_discovery"."http_cookie" VARCHAR,
+"field_discovery"."http_referer" VARCHAR,
+"field_discovery"."http_user_agent" VARCHAR,
+"field_discovery"."http_content_length" VARCHAR,
+"field_discovery"."http_content_type" VARCHAR,
+"field_discovery"."http_set_cookie" VARCHAR,
+"field_discovery"."http_version" VARCHAR,
+"field_discovery"."http_response_latency_ms" VARCHAR,
+"field_discovery"."http_session_duration_ms" VARCHAR,
+"field_discovery"."http_action_file_size" VARCHAR,
+"field_discovery"."mail_protocol_type" VARCHAR,
+"field_discovery"."mail_account" VARCHAR,
+"field_discovery"."mail_from_cmd" VARCHAR,
+"field_discovery"."mail_to_cmd" VARCHAR,
+"field_discovery"."mail_from" VARCHAR,
+"field_discovery"."mail_to" VARCHAR,
+"field_discovery"."mail_cc" VARCHAR,
+"field_discovery"."mail_bcc" VARCHAR,
+"field_discovery"."mail_subject" VARCHAR,
+"field_discovery"."mail_subject_charset" VARCHAR,
+"field_discovery"."mail_content" VARCHAR,
+"field_discovery"."mail_content_charset" VARCHAR,
+"field_discovery"."mail_attachment_name" VARCHAR,
+"field_discovery"."mail_attachment_name_charset" VARCHAR,
+"field_discovery"."mail_attachment_content" VARCHAR,
+"field_discovery"."mail_eml_file" VARCHAR,
+"field_discovery"."mail_snapshot" VARCHAR,
+"field_discovery"."dns_qr" VARCHAR,
+"field_discovery"."dns_opcode" VARCHAR,
+"field_discovery"."dns_aa" VARCHAR,
+"field_discovery"."dns_tc" VARCHAR,
+"field_discovery"."dns_rd" VARCHAR,
+"field_discovery"."dns_ra" VARCHAR,
+"field_discovery"."dns_rcode" VARCHAR,
+"field_discovery"."dns_qdcount" VARCHAR,
+"field_discovery"."dns_ancount" VARCHAR,
+"field_discovery"."dns_nscount" VARCHAR,
+"field_discovery"."dns_arcount" VARCHAR,
+"field_discovery"."dns_qname" VARCHAR,
+"field_discovery"."dns_qtype" VARCHAR,
+"field_discovery"."dns_qclass" VARCHAR,
+"field_discovery"."dns_cname" VARCHAR,
+"field_discovery"."dns_sub" VARCHAR,
+"field_discovery"."dns_rr" VARCHAR,
+"field_discovery"."dns_response_latency_ms" VARCHAR,
+"field_discovery"."ssl_sni" VARCHAR,
+"field_discovery"."ssl_san" VARCHAR,
+"field_discovery"."ssl_cn" VARCHAR,
+"field_discovery"."ssl_pinningst" VARCHAR,
+"field_discovery"."ssl_intercept_state" VARCHAR,
+"field_discovery"."ssl_passthrough_reason" VARCHAR,
+"field_discovery"."ssl_server_side_latency" VARCHAR,
+"field_discovery"."ssl_client_side_latency" VARCHAR,
+"field_discovery"."ssl_server_side_version" VARCHAR,
+"field_discovery"."ssl_client_side_version" VARCHAR,
+"field_discovery"."ssl_cert_verify" VARCHAR,
+"field_discovery"."ssl_error" VARCHAR,
+"field_discovery"."ssl_con_latency_ms" VARCHAR,
+"field_discovery"."ssl_ja3_fingerprint" VARCHAR,
+"field_discovery"."ssl_ja3_hash" VARCHAR,
+"field_discovery"."ssl_cert_issuer" VARCHAR,
+"field_discovery"."ssl_cert_subject" VARCHAR,
+"field_discovery"."quic_version" VARCHAR,
+"field_discovery"."quic_sni" VARCHAR,
+"field_discovery"."quic_user_agent" VARCHAR,
+"field_discovery"."ftp_account" VARCHAR,
+"field_discovery"."ftp_url" VARCHAR,
+"field_discovery"."ftp_content" VARCHAR,
+"field_discovery"."ftp_link_type" VARCHAR,
+"field_discovery"."bgp_type" VARCHAR,
+"field_discovery"."bgp_as_num" VARCHAR,
+"field_discovery"."bgp_route" VARCHAR,
+"field_discovery"."rtp_payload_type_c2s" VARCHAR,
+"field_discovery"."rtp_payload_type_s2c" VARCHAR,
+"field_discovery"."rtp_pcap_path" VARCHAR,
+"field_discovery"."rtp_originator_dir" VARCHAR,
+"field_discovery"."app_extra_info" VARCHAR,
+"field_discovery"."doh_url" VARCHAR,
+"field_discovery"."doh_host" VARCHAR,
+"field_discovery"."doh_request_line" VARCHAR,
+"field_discovery"."doh_response_line" VARCHAR,
+"field_discovery"."doh_cookie" VARCHAR,
+"field_discovery"."doh_referer" VARCHAR,
+"field_discovery"."doh_user_agent" VARCHAR,
+"field_discovery"."doh_content_length" VARCHAR,
+"field_discovery"."doh_content_type" VARCHAR,
+"field_discovery"."doh_set_cookie" VARCHAR,
+"field_discovery"."doh_version" VARCHAR,
+"field_discovery"."doh_message_id" VARCHAR,
+"field_discovery"."doh_qr" VARCHAR,
+"field_discovery"."doh_opcode" VARCHAR,
+"field_discovery"."doh_aa" VARCHAR,
+"field_discovery"."doh_tc" VARCHAR,
+"field_discovery"."doh_rd" VARCHAR,
+"field_discovery"."doh_ra" VARCHAR,
+"field_discovery"."doh_rcode" VARCHAR,
+"field_discovery"."doh_qdcount" VARCHAR,
+"field_discovery"."doh_ancount" VARCHAR,
+"field_discovery"."doh_nscount" VARCHAR,
+"field_discovery"."doh_arcount" VARCHAR,
+"field_discovery"."doh_qname" VARCHAR,
+"field_discovery"."doh_qtype" VARCHAR,
+"field_discovery"."doh_qclass" VARCHAR,
+"field_discovery"."doh_cname" VARCHAR,
+"field_discovery"."doh_sub" VARCHAR,
+"field_discovery"."doh_rr" VARCHAR,
+"field_discovery"."sip_call_id" VARCHAR,
+"field_discovery"."sip_originator_description" VARCHAR,
+"field_discovery"."sip_responder_description" VARCHAR,
+"field_discovery"."sip_user_agent" VARCHAR,
+"field_discovery"."sip_server" VARCHAR,
+"field_discovery"."sip_originator_sdp_connect_ip" VARCHAR,
+"field_discovery"."sip_originator_sdp_media_port" VARCHAR,
+"field_discovery"."sip_originator_sdp_media_type" VARCHAR,
+"field_discovery"."sip_originator_sdp_content" VARCHAR,
+"field_discovery"."sip_responder_sdp_connect_ip" VARCHAR,
+"field_discovery"."sip_responder_sdp_media_port" VARCHAR,
+"field_discovery"."sip_responder_sdp_media_type" VARCHAR,
+"field_discovery"."sip_responder_sdp_content" VARCHAR,
+"field_discovery"."sip_duration_s" VARCHAR,
+"field_discovery"."sip_bye" VARCHAR,
+"field_discovery"."ssh_version" VARCHAR,
+"field_discovery"."ssh_auth_success" VARCHAR,
+"field_discovery"."ssh_client_version" VARCHAR,
+"field_discovery"."ssh_server_version" VARCHAR,
+"field_discovery"."ssh_cipher_alg" VARCHAR,
+"field_discovery"."ssh_mac_alg" VARCHAR,
+"field_discovery"."ssh_compression_alg" VARCHAR,
+"field_discovery"."ssh_kex_alg" VARCHAR,
+"field_discovery"."ssh_host_key_alg" VARCHAR,
+"field_discovery"."ssh_host_key" VARCHAR,
+"field_discovery"."ssh_hassh" VARCHAR,
+"field_discovery"."radius_packet_type" VARCHAR,
+"field_discovery"."radius_nas_ip" VARCHAR,
+"field_discovery"."radius_framed_ip" VARCHAR,
+"field_discovery"."radius_account" VARCHAR,
+"field_discovery"."radius_session_timeout" VARCHAR,
+"field_discovery"."radius_idle_timeout" VARCHAR,
+"field_discovery"."radius_acct_status_type" VARCHAR,
+"field_discovery"."radius_acct_terminate_cause" VARCHAR,
+"field_discovery"."radius_event_timestamp" VARCHAR,
+"field_discovery"."radius_nas_port" VARCHAR,
+"field_discovery"."radius_service_type" VARCHAR,
+"field_discovery"."radius_framed_protocol" VARCHAR,
+"field_discovery"."radius_callback_number" VARCHAR,
+"field_discovery"."radius_callback_id" VARCHAR,
+"field_discovery"."radius_termination_action" VARCHAR,
+"field_discovery"."radius_called_station_id" VARCHAR,
+"field_discovery"."radius_calling_station_id" VARCHAR,
+"field_discovery"."radius_acct_delay_time" VARCHAR,
+"field_discovery"."radius_acct_session_id" VARCHAR,
+"field_discovery"."radius_acct_multi_session_id" VARCHAR,
+"field_discovery"."radius_acct_input_octets" VARCHAR,
+"field_discovery"."radius_acct_output_octets" VARCHAR,
+"field_discovery"."radius_acct_input_packets" VARCHAR,
+"field_discovery"."radius_acct_output_packets" VARCHAR,
+"field_discovery"."radius_acct_session_time" VARCHAR,
+"field_discovery"."radius_acct_link_count" VARCHAR,
+"field_discovery"."radius_acct_interim_interval" VARCHAR,
+"field_discovery"."radius_acct_authentic" VARCHAR,
+"field_discovery"."stratum_cryptocurrency" VARCHAR,
+"field_discovery"."stratum_mining_pools" VARCHAR,
+"field_discovery"."stratum_mining_program" VARCHAR,
+"field_discovery"."rdp_cookie" VARCHAR,
+"field_discovery"."rdp_security_protocol" VARCHAR,
+"field_discovery"."rdp_client_channels" VARCHAR,
+"field_discovery"."rdp_keyboard_layout" VARCHAR,
+"field_discovery"."rdp_client_version" VARCHAR,
+"field_discovery"."rdp_client_name" VARCHAR,
+"field_discovery"."rdp_client_product_id" VARCHAR,
+"field_discovery"."rdp_desktop_width" VARCHAR,
+"field_discovery"."rdp_desktop_height" VARCHAR,
+"field_discovery"."rdp_requested_color_depth" VARCHAR,
+"field_discovery"."rdp_certificate_type" VARCHAR,
+"field_discovery"."rdp_certificate_count" VARCHAR,
+"field_discovery"."rdp_certificate_permanent" VARCHAR,
+"field_discovery"."rdp_encryption_level" VARCHAR,
+"field_discovery"."rdp_encryption_method" VARCHAR);