Classifier Reporting Database

Schema
UM643402
November 18

© Boldon James Ltd. All rights reserved.

Customer Documentation
This document is for informational purposes only, and Boldon James cannot guarantee the precision of any information supplied.
BOLDON JAMES MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT.
 Classifier Reporting Database Schema UM643402

Contents
1 Introduction ........................................................................................................................................... 6

2 Database Schema ................................................................................................................................. 7

2.1 ClassifierStaging Schema ......................................................................................................... 8
2.2 ClassifierWorking Schema ...................................................................................................... 10
2.3 Default Schema ....................................................................................................................... 12
2.3.1 Temporary Tables 15
2.4 ClassifierReporting Schema .................................................................................................... 16
2.5 ClassifierReporting2 Schema .................................................................................................. 17
2.6 ClassifierReporting3 Schema .................................................................................................. 17
2.7 Default Schema ....................................................................................................................... 18
3 Table Data Dictionary ......................................................................................................................... 19
3.1 ClassifierStaging ...................................................................................................................... 19
3.1.1 ApplicationNames 19
3.1.2 StagedAttachments 21
3.1.3 StagedAttachmentSelectorValue 22
3.1.4 StagedComputers 23
3.1.5 StagingDocumentEvents 25
3.1.6 StagedDocumentEventsSelectorValue 28
3.1.7 StagedEmailEvents 29
3.1.8 StagedEmailEventsSelectorValue 32
3.1.9 StagedKnownUsers 33
3.1.10 StagedManagementEvents 36
3.1.11 StagedRecipients 38
3.2 ClassifierWorking ..................................................................................................................... 39
3.2.1 Attachments 39
3.2.2 AttachmentSelectorValues 40
3.2.3 AttachmentToSelectorValues 41
3.2.4 Computers 42
3.2.5 DocumentEvents 44
3.2.6 EmailAddresses 45
3.2.7 EmailEvents 46
3.2.8 Errors 47
3.2.9 EventCheckDetails 48
3.2.10 EventGeneralDescriptions 49
3.2.11 EventGeneralDetails 59
3.2.12 EventLevels 60
3.2.13 EventSelectorValues 61
3.2.14 EventToSelectorValues 62
3.2.15 IssueTypes 63
3.2.16 KnownUsers 64
3.2.17 ManagementEvents 66
3.2.18 Recipients 67
[Link] 2
 Classifier Reporting Database Schema UM643402

3.2.19 RecipientTypes 68
3.2.20 SelectorValues 69
3.2.21 SystemEvents 70
3.2.22 TaskCategories 72
3.3 Default Schema (dbo) .............................................................................................................. 76
3.3.1 Settings 76
4 Database Indicies ............................................................................................................................... 77
4.1 ClassifierStaging ...................................................................................................................... 77
4.2 ClassifierWorking ..................................................................................................................... 78
5 Views Data Dictionary ........................................................................................................................ 82
5.1 ClassifierReporting .................................................................................................................. 82
5.1.1 ClassificationChanges 82
5.1.2 ClassificationSummary 83
5.1.3 ClassificationIssues 84
5.1.4 DocumentClassificationTrends 85
5.1.5 EmailClassificationTrends 86
5.1.6 MAIssues 87
5.1.7 OverviewAllChecks 88
5.1.8 OverviewClassifications 89
5.1.9 PolicyCheckBreakDown 90
5.1.10 PolicyChecksWithAdvisories 91
5.1.11 PolicyDistribution 92
5.1.12 PolicyWarningTrends 93
5.1.13 ReportAttTypesbyClassification 94
5.1.14 ReportTotalDocumentsByClassificationUser 95
5.1.15 ReportTotalEmailsbyClassificationDomain 96
5.1.16 ReportTotalEmailsbyClassificationUser 97
5.2 ClassifierReporting2 ................................................................................................................ 98
5.2.1 ClassificationChanges 98
5.2.2 ClassificationSummary 99
5.2.3 DocumentClassificationTrends 100
5.2.4 EmailClassificationTrends 101
5.2.5 FormattedClassifications 102
5.2.6 OverviewClassifications 103
5.2.7 ReportDocumentLabelChanges 104
5.2.8 ReportEmailLabelChanges 105
5.2.9 ReportUserByClassificationByFilenameByTime 106
5.2.10 SharePoint 107
5.2.11 UnusalClassifications 108
5.3 ClassifierReporting3 .............................................................................................................. 109
5.3.1 Computers 109
5.3.2 Departments 109
5.3.3 DocumentClassifierActivity 109
5.3.4 DocumentLabelDowngrade 110
5.3.5 Reasons 110
5.3.6 SelectorValueNames 110

[Link] 3
 Classifier Reporting Database Schema UM643402

5.3.7 SelectorValueNamesAndWC 111

5.3.8 UserClassifierActivity 111
5.3.9 UserResponseActivity 111
6 Table Types ....................................................................................................................................... 112
6.1 ClassifierStaging .................................................................................................................... 112
6.1.1 AttachmentsTableType2 112
6.1.2 RecipientTableType 113
6.1.3 SelectorValueTableType 114
7 Users, Logins and Roles .................................................................................................................. 115

8 Stored Procedures and SQL Jobs .................................................................................................. 116

8.1 Classifier Staging Stored Procedures ................................................................................... 116
8.1.1 usp_StagingComputersInsert 116
8.1.2 usp_StagingComputersUpdateDelete 116
8.1.3 usp_StagingDocumentEventsInsert 117
8.1.4 usp_StagingEmailEventsInsert 118
8.1.5 usp_StagingKnownUsersInsert 118
8.1.6 usp_StagingKnownUsersUpdateDelete 119
8.1.7 usp_StagingManagementEventsInsert 120
8.2 ClassifierWorking stored procedures..................................................................................... 120
8.2.1 usp_AttachmentSelectorValuesInsert 120
8.2.2 usp_DeleteData 121
8.2.3 usp_DocumentEventsWorkingInsert 121
8.2.4 usp_EmailEventsWorkingInsert 122
8.2.5 usp_EventSelectorValueInsert 122
8.2.6 usp_KnownComputersWorkingInsert 123
8.2.7 usp_KnownUsersWorkingInsert 123
8.2.8 usp_ManagementEventsWorkingInsert 124
8.2.9 usp_ModifySelectorValues 124
8.2.10 usp_ReorganizeIndices 124
8.2.11 usp_CreateIndices 125
8.3 ClassifierReport3 stored procedures ..................................................................................... 125
8.3.1 usp_ReportClassificationBreakdown 125
8.3.2 usp_ReportDocumentsDowngraded 126
8.3.3 usp_ReportEmailDowngraded 126
8.3.4 usp_ReportEmailsByDomain 126
8.3.5 usp_ReportTotalEmailsSentByDomain 127
8.3.6 usp_ReportSentUnclassifiedAttachments 127
8.4 ClassifierReport3 Table Value Functions .............................................................................. 127
8.4.1 fnClassifierActivity 127
8.4.2 fnClassifierActivityCount 128
8.4.3 fnClassifierDowngradeActivity 128
8.4.4 fnClassifierDowngradeActivityCount 128
8.4.5 fnClassifierLabelActivity 129
8.4.6 fnClassifierLabelActivityCount 129
8.4.7 fnClassifierLabelCounts 129
8.4.8 fnClassifierMachines 130
[Link] 4
 Classifier Reporting Database Schema UM643402

8.4.9 fnClassifierUserActivity 130

8.4.10 fnClassifierLabelActivityTopN 130
8.4.11 fnClassifierLabelActivityTopNCount 131
8.4.12 fnReasons 131
8.5 Application Locks ................................................................................................................... 131
8.6 SQL Jobs ............................................................................................................................... 132

[Link] 5
 Classifier Reporting Database Schema UM643402

1 INTRODUCTION
This document presents the schema of version 1.3 of the Classifier Events Database component of
the Classifier Reporting Services.
Boldon James Classifier Reporting Services delivers dashboards and reports that provide
administrators and managers insight into the way that Classifier components are being used in their
organisations. The Classifier Events Database is at the heart of the system’s components.
The architecture is based on partitioning the data into two separate sets of tables; the
ClassifierStaging and the ClassifierWorking tables. Event data is written into the ClassifierStaging
tables by the Event Log service using ClassifierStaging Stored Procedures. The Event data is
moved from the ClassifierStaging tables to the ClassifierWorking tables using ClassifierWorking
Stored Procedures run by SQL jobs.
Users and Computers data can also be extracted from Active Directory and written to the database
by the AD service using ClassifierStaging Stored Procedures. Similarly, the Users and Computers
data can be written to the ClassifierWorking tables by using Stored Procedures run by SQL jobs.
The Classifier Reporting Console uses View, Stored Procedures and Functions from the
ClassifierReporting, ClassifierReporting2 and ClassifierReporting3 schemas to present data from
the ClassifierWorking tables.

[Link] 6
 Classifier Reporting Database Schema UM643402

2 DATABASE SCHEMA
This section details the Classifier Reporting database schemas. Classifier Reporting uses five
database schemas:

Table Description Version

ClassifierStaging Tables in this schema hold Event and Active Directory data from 1.2.5
suppliers. The schema also contains the stored procedures used by
the Event Log and AD services to write data into the database.
Only users in the ClassifierSupplierRole role have access to the
stored procedures in this schema.
ClassifierWorking This schema contains Tables that hold the processed Event and 1.2.5
Active Directory data and is used for all queries. The schema also
contains stored procedures that perform the Staging to Working table
processing.
Only the ClassifierAdminUser user (which is mapped to the
ClassifierMaintenanceRole1) has permission to use the stored
procedures in this schema
ClassifierReporting This schema contains Views used by the Classifier Reporting 1.2.5
Console to display data from tables in the Classifier Working schema.
Only users in the ClassifierSupplierRole role have access to Views in
this schema.
ClassifierReporting2 This schema contains Views used by the Classifier Reporting 1.2.5
Console from version 1.2 and above, to display data from tables in
the Classifier Working schema. Only users in the
ClassifierConsumerRole role have access to Views in this schema.
ClassifierReporting3 This schema contains Views used by the Classifier Reporting 1.3
Console from version 1.3 and above, to display data from tables in
the Classifier Working schema. The schema also contains stored
procedures and functions that are used to populate reports introduced
in V1.3 of the Classifier Reporting Console.
Only users in the ClassifierConsumerRole role have access to Views
and stored in this schema.
Default Schema (db0) This is the SQL Server default schema. The Classifier Events 1.2.5
database creates one table in this schema.

1 The ClassifierMaintenanceRole is introduced in V1.3.

[Link] 7
 Classifier Reporting Database Schema UM643402

2.1 ClassifierStaging Schema

Table Description Version
ApplicationNames The table to represent application names 1.2.5

StagedAttachments The table to hold Attachments from Email Events 1.2.5

StagedAttachmentSelectorValue The table to hold selector values parsed from 1.2.5

Attachment Labels.

StagedComputers The table to represent computers stored in the local AD. 1.2.5

StagedDocumentEvents The table to represent staged general Classifier 1.2.5

document events

StagedDocumentEventSelectorValue The table to hold selector values parsed from events. 1.2.5

StagedEmailEvents The table to represent staged general Classifier email 1.2.5

events

StagedEmailEventSelectorValue The table to hold selector values parsed from events. 1.2.5

StagedKnownUsers The table to represent users, including contacts, stored 1.2.5

in the local AD.

StagedManagementEvents The table to hold Management Events. 1.2.5

StagedRecipients The table to hold Recipients extracted from Email 1.2.5

Events

See the section ClassifierStaging stored procedures for details of the schema’s stored procedures.

[Link] 8
 Classifier Reporting Database Schema UM643402

Figure 1 ClassifierStaging Schema

[Link] 9
 Classifier Reporting Database Schema UM643402

2.2 ClassifierWorking Schema

Table Description Version
Attachments The Attachments table holds details of attachments of 1.2.5
emails and where appropriate if the attachment passed
attachment high-water mark checks.
AttachmentSelectorValues The AttachmentSelectorValues table holds indexes 1.2.5
that map between classifications in attachment records
in the Attachments table and the classification’s
selector values in the SelectorValues table.
A classification in an Attachments record is
represented by one record in the
AttachmentSelectorValues. The record contains up to
three SelectorValues records indexes that identifies
the three (or less) most significant selector values in the
classification. This table is optimised for use in any
customer created dashboards or reports.
AttachmentToSelectorValues The AttachmentToSelectorValues table holds 1.2.5
indexes that map between classifications in Attachment
records in the Attachments table and the
classification’s selector values in the SelectorValues
table.
There is a record in this table for every selector value
contained in a classification. A record contains the
index of the Attachments record containing the
classification and the index of one of the classification’s
selector values in the SelectorValues table. For
example, if a classification contains 5 selector values,
there will be 5 records in this table for the classification.
Each record contains the same index of the
Attachments record containing the classification and
the index of the SelectorValues record that contains
an individual selector value.
Computers The Computers table holds details about computers 1.2.5
from the associated Active Directory domain(s).
DocumentEvents All Classifier document events have an entry in the 1.2.5
DocumentEvents table. The entries include the
filename of the document.
EmailAddresses The EmailAddresses table holds the SMTP address 1.2.5
and, where applicable, the Exchange address of email
recipients and users imported from Active Directory.
EmailEvents All Classifier email events have an entry in the 1.2.5
EmailEvents table. The entries include the email
subject and who the email was from.
Errors The Errors table records issues with the database 1.2.5
stored procedures. Administrators should periodically
review the Errors table for any issues.
EventCheckDetails All Classifier check rules details are placed in the 1.2.5
EventCheckDetails table. The entries include the

[Link] 10
 Classifier Reporting Database Schema UM643402

success or not of the check and whether the user

chose to ignore or honour the check.
EventGeneralDescription The EventGeneralDescription table that maps event 1.2.5
identifiers to their textual description.
EventGeneralDetails All Classifier general events are stored in the 1.2.5
EventGeneralDetails table. The entries include details
of user configurations and any licensing errors.
EventLevels The EventLevels table is a pre-defined table that maps 1.2.5
event level identifiers to their textual representation
EventSelectorValues The EventSelectorValues table holds indexes that 1.2.5
map between classifications in event records in the
SystemEvents table and the classification’s selector
values in the SelectorValues table.
A classification in a SystemEvents record is
represented by one record in the
EventSelectorValues. The record contains up to three
SelectorValues records indexes that identifies the three
(or less) most significant selector values in the
classification. This table is optimised for use in the
Classifier Reporting Console.
EventToSelectorValues The EventToSelectorValues table holds indexes that 1.2.5
map between classifications in event records in the
SystemEvents table and the classification’s selector
values in the SelectorValues table.
There is a record in this table for every selector value
contained in a classification. A record contains the
index of the SystemEvents record containing the
classification and the index of one of the classification’s
selector values in the SelectorValues table. For
example, if a classification contains 5 selector values,
there will be 5 records in this table for the classification.
Each record contains the same index of the
SystemEvents record containing the classification and
the index of the SelectorValues record that contains an
individual selector value.
IssueTypes The IssueTypes table is a pre-defined table that maps 1.2.5
event issue type identifiers to their textual
representation
KnownUsers The KnownUsers table holds details about users from 1.2.5
the associated Active Directory domain(s).
ManagementEvents The ManagementEvents table holds events from the 1.2.5
Classifier Management Agent including the noted issue
type.
Recipients The Recipients table holds details of recipients of emails 1.2.5
and, where appropriate, whether the recipient passed
recipient clearance checks.
RecipientTypes The RecipientTypes table is a pre-defined table that maps 1.2.5
email recipient type identifiers to their textual representation.
SelectorValues The SelectorValues table holds details of all label selectors 1.2.5
in an organisation. This table is populated by the Event Log
[Link] 11
 Classifier Reporting Database Schema UM643402

Service and any new selector values found in events are

added to the table.
SystemEvents All Classifier events have an entry in the SystemEvents 1.2.5
table. Each entry includes the username of the person
generating the event, the related Classifier application and, if
applicable, the classification of the related event.
TaskCategories The TaskCategories table is a pre-defined table that maps 1.2.5
event task category identifiers to their textual representation.

See the section ClassifierWorking stored procedures for details of the schema’s stored procedures.

2.3 Default Schema

View Description Version
Settings Table for run-time Settings 1.2.5

[Link] 12
 Classifier Reporting Database Schema UM643402

Figure 2 Partial ClassifierWorking Schema showing relationships between

Tables holding Event data

[Link] 13
 Classifier Reporting Database Schema UM643402

Figure 3 Partial ClassifierWorking Schema showing relationships between

Tables holding parsed Classification data

[Link] 14
 Classifier Reporting Database Schema UM643402

2.3.1 Temporary Tables

These tables are for internal use only. They are used by stored procedures to temporarily hold data
during processing. In previous versions of the database, the tables were created and destroyed by
the stored procedures. The tables now permanently reside in the database but do not contain data
except during stored procedure processing.

Table Used by stored procedure Version

ClassifierStaging._StagedDocumentEvents usp_DocumentEventsWorkingInsert 1.3.0
ClassifierStaging._StagedEmailEvents usp_EmailEventsWorkingInsert 1.3.0
ClassifierWorking._AddressTable usp_EmailEventsWorkingInsert 1.2.5
ClassifierWorking._EETable usp_EmailEventsWorkingInsert 1.2.5
ClassifierWorking._Fragmentation usp_ReorganizeIndices 1.2.5
ClassifierWorking._IndexCommands usp_ReorganizeIndices 1.2.5
ClassifierWorking._RecipTable usp_EmailEventsWorkingInsert 1.2.5
ClassifierWorking._RecordsToDelete usp_DeleteData 1.2.5
ClassifierWorking._StagedAttachment2 usp_EmailEventsWorkingInsert 1.2.5
ClassifierWorking._SVIds_1 usp_EventSelectorValueInsert 1.2.5
ClassifierWorking._SVIds_2 usp_EventSelectorValueInsert 1.2.5
ClassifierWorking._SVIds_3 usp_EventSelectorValueInsert 1.2.5

[Link] 15
 Classifier Reporting Database Schema UM643402

2.4 ClassifierReporting Schema

View Description Version
ClassificationChanges View to show details, including the Users Name, 1.2.5
Application, Classifiers Advice and the Events
Classification, from Label Change Events

ClassificationSummary View showing a summary of all Event Classifications. 1.2.5

ClassifierIssues View showing details of Classifier General Events 1.2.5

DocumentClassificationTr View showing the Classification from Document Save 1.2.5

ends Events.

EmailClassificationTrend View showing the Classification from Email Send Events. 1.2.5
s

MAIssues View showing details of Management Agent Events 1.2.5

OverviewAllChecks View to show details, including the Classification, from 1.2.5

Email and Document Check Events

OverviewClassifications View to show the Time and Classification in Email Send 1.2.5
and Document Open Events

PolicyCheckBreakDown View to show details, including the Users Application, 1.2.5

from Email and Document Check Events

PolicyChecksWithAdvisor View to show details, including the Users Application and 1.2.5
ies Classifiers Advice, from Email and Document Check
Events

PolicyDistribution View showing Classifier Policies applied to Users. 1.2.5

PolicyWarningTrends View to show details, including the Users Application and 1.2.5
Classifiers Advice, from Email and Document Check
Events

ReportAttTypesbyClassifi View showing details of the SMTP domains of recipients 1.2.5

cation of Email Send Events.

ReportTotalDocumentsby View showing details of Classifier Document Save 1.2.5

ClassificationUser Events

ReportTotalEmailsbyClas View showing details of the SMTP domains of recipients 1.2.5

sificationDomain of Email Send Events.

ReportTotalEmailsbyClas View showing details of Classifier Email Send Events 1.2.5

sificationUser

[Link] 16
 Classifier Reporting Database Schema UM643402

2.5 ClassifierReporting2 Schema

View Description Version
ClassificationChanges View to show details, including the Users Name, Application, 1.2.5
Classifiers Advice and the first three parsed selector values
from the Events Classification, from Label Change Events

ClassificationSummary View showing a summary of all Event Classifications parsed 1.2.5

into selector values. The first three parsed selector values are
shown.

DocumentClassificationTrend View showing the first three selector values parsed from the 1.2.5
s Classification in Document Save Events.

EmailClassificationTrends View showing the first three selector values parsed from the 1.2.5
Classification in Email Send Events.

FormattedClassifications View to show the first three individual selector values parsed 1.2.5
from an Event Classification.

OverviewClassifications View to show the Time and first three individual selector values 1.2.5
parsed from the Classifications in Email Send and Document
Open Events

ReportDocumentLabelChang View shows details of Document Check Events where the 1.2.5
es Classification has been changed

ReportEmailLabelChanges View shows details of Email Check Events where the 1.2.5
Classification has been changed

ReportUserByClassificationBy View showing details of Classifier Document Save Events 1.2.5

FilenameByTime

SharePoint View showing details of SharePoint Events 1.2.5

UnusualClassifications View to show details of Events whose Classification could not 1.2.5
be parsed into individual selector values

2.6 ClassifierReporting3 Schema

View Description Version
Computers View shows details of Computers imported from the Active 1.3
Directory.

Departments View showing the names of User's departments and the wild 1.3
card %.; View is used to select User input for a report.

DocumentClassifierActivity View showing classifier activity on Documents 1.3

DocumentLabelDowngrade View listing the user and time of all document label downgrade 1.3
events.

[Link] 17
 Classifier Reporting Database Schema UM643402

Reasons View showing all the non-null reasons supplied by users to a 1.3
classifier event check challenge.

SelectorValueNames View showing the names of selector values used as the first 1.3
value in parsed classifications.

SelectValueNamesAndWC View showing the names of selector values used as the first 1.3
value in parsed classifications and the wild card %.; View is
used to select User input for a report.

UserClassifierActivity View showing User classifier check activities on documents 1.3

and emails.

UserResponseActivity View showing User's responses to classifier checks 1.3

See the section ClassifierReporting3 stored procedures for details of the schema’s stored
procedures and the section ClassifierReporting3 functions for details of the schema’s table valued
functions.

2.7 Default Schema

View Description Version
ClassifierEventsDBVersion View enabling a Service to check the database version 1.2.5

[Link] 18
 Classifier Reporting Database Schema UM643402

3 TABLE DATA DICTIONARY

3.1 ClassifierStaging
3.1.1 ApplicationNames

Key2 Name Data Type (Size) Mandatory3 Anonymised4 Description Version

ApplicationName NVARCHAR(128) YES NO The equivalent application name to the provider name. 1.2.5

P ApplicationNameId INT YES NO Auto-generated Primary key identifier. 1.2.5

OfficeProductId INT YES NO Internal identifier for the application name. 1.2.5

ProviderName NVARCHAR(128) YES NO Provider Name representing the name of the Classifier application 1.2.5
recording the event.

The table is defined with the following values

ApplicationName OfficeProductId ProviderName
Word 1 Classifier Addin - Word

Excel 2 Classifier Addin - Excel

PowerPoint 3 Classifier Addin - PowerPoint

Visio 4 Classifier Addin - Visio

Project 5 Classifier Addin - Project

2 Indicates if the field is a Primary (P) or Foreign (F) key.

3 Indicates if a field should be present (YES) or is optional (NO). Mandatory fields are defined in SQL as being NON-NULL.
4 Indicates if the data in the field can be Anonymised i.e. hashed (YES) or not (NO).

[Link] 19
 Classifier Reporting Database Schema UM643402

Outlook 6 Classifier Addin - Outlook

OWA 0 Classifier Addin - OWA

Lotus Notes 0 Notes Classifier

AutoCAD 0 CAD Classifier

SharePoint 0 SharePoint Classifier

File Classifier 0 File Classifier

Power Classifier 0 Power Classifier

Classifier Administration Console 0 Classifier Administration

Mobile Classifier 0 Mobile Classifier

Classifier Management Agent 0 Boldon James Auditing-Classifier-Management Agent

[Link] 20
 Classifier Reporting Database Schema UM643402

3.1.2 StagedAttachments

Key Name Data Type (Size) Mandatory Anonymised Description Version

AttachmentDocumentIndex NVARCHAR(250) NO NO Attachment Document index of the attachment. 1.2.5

AttachmentNumber SMALLINT YES NO Unique number of the attachment for each event. 1.2.5

AttachmentStatusDescription NVARCHAR(32) NO NO Description of the status of the attachment in HWM 1.2.5

checks. Must be one of FAILED, SUCCEEDED, And
INACCESSIBLE.

Classification NVARCHAR(2048) NO NO The Classification of the attached document. 1.2.5

ClassifierDocId NVARCHAR(128) NO NO The ClassifierDocId of the attachment. 1.2.5

Extension NVARCHAR(260) NO YES The filename extension of the attached document. 1.2.5

FileName NVARCHAR(260) NO YES The title of the attachment. 1.2.5

SISL NVARCHAR(260) NO NO XML encoding of the Classification. 1.2.5

StagedAttachmentEmailEventId INT YES NO Foreign Key to the StagedEmailEvent table.5 1.2.5

P StagedAttachmentId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

StagedAttachmentRowId UNIQUEIDENTIFIER YES NO Auto-generated Unique Row Identifier. 1.2.5

5 Foreign key constraint removed in V1.3.0 but column should index the StagedEmailEvent table
[Link] 21
 Classifier Reporting Database Schema UM643402

3.1.3 StagedAttachmentSelectorValue

Key Name Data Type (Size) Mandatory Anonymised Description Version

AttachmentNumber SMALLINT YES NO Unique number of the attachment for each 1.2.5
event.

SelectorValueOrder SMALLINIT YES NO The order of the parsed selector value in the 1.2.5
attachments label.

P StagedAttachmentSelectorValueId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

StagedEmailEventId INT YES NO Foreign Key to StagingEmailEvent that 1.2.5

contains the Attachment that has the parsed
selector value.6

Value NVARCHAR(256) NO NO The value of the parsed selector value. 1.2.5

XmlId NVARCHAR(256) YES NO The XML identifier of the parsed selector value. 1.2.5

6 Foreign key constraint removed in V1.3.0 but column should index the StagedEmailEvent table
[Link] 22
 Classifier Reporting Database Schema UM643402

3.1.4 StagedComputers

Key Name Data Type (Size) Mandatory Anonymised Description Version

Attribute1 NVARCHAR(2048) NO NO Configurable attribute 1 of the computer from AD.7 1.2.5

Attribute10 NVARCHAR(2048) NO NO Configurable attribute 10 of the computer from AD. 1.2.5

Attribute2 NVARCHAR(2048) NO NO Configurable attribute 2 of the computer from AD. 1.2.5

Attribute3 NVARCHAR(2048) NO NO Configurable attribute 3 of the computer from AD. 1.2.5

Attribute4 NVARCHAR(2048) NO NO Configurable attribute 4 of the computer from AD. 1.2.5

Attribute5 NVARCHAR(2048) NO NO Configurable attribute 5 of the computer from AD. 1.2.5

Attribute6 NVARCHAR(2048) NO NO Configurable attribute 6 of the computer from AD. 1.2.5

Attribute7 NVARCHAR(2048) NO NO Configurable attribute 7 of the computer from AD. 1.2.5

Attribute8 NVARCHAR(2048) NO NO Configurable attribute 8 of the computer from AD. 1.2.5

Attribute9 NVARCHAR(2048) NO NO Configurable attribute 9 of the user from AD. 1.2.5

Company NVARCHAR(512) NO NO Company. 1.2.5

ComputerGUID VARCHAR(56) YES NO AD GUID of computer. 1.2.5

ComputerName NVARCHAR(64) YES NO Pre Windows 2000 Computer Name. 1.2.5

DCType NVARCHAR(512) YES NO DC Type. 1.2.5

Description NVARCHAR(1024) NO NO Description. 1.2.5

DNSName NVARCHAR(2048) YES NO DNS host name of the computer. 1.2.5

7 Configurable attributes are not currently supported.

[Link] 23
 Classifier Reporting Database Schema UM643402

isDeleted VARCHAR(5) NO NO Set to true if the computer has been deleted in AD. 1.2.5

OperatingSystemName NVARCHAR(512) NO NO Operating System Name. 1.2.5

OperatingSystemServicePack NVARCHAR(512) NO NO Operating System Service Pack. 1.2.5

OperatingSystemVersion NVARCHAR(512) NO NO Operating System Version. 1.2.5

Site NVARCHAR(2048) NO NO Physical location or network, usually defined only for 1.2.5
Domain Controllers.

p StagedComputerEventId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

StagedComputerRowId UNIQUEIDENTIFIER YES NO Auto-generated Unique Row Identifier. 1.2.5

TimeDeleted DATETIME28 NO NO Time that the AD service first identifies that the computer 1.2.6
has been deleted in AD.

8 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 24
 Classifier Reporting Database Schema UM643402

3.1.5 StagingDocumentEvents

Key Name Data Type (Size) Mandatory Anonymised Description Version

Advisory NVARCHAR(32) NO NO The level of the warning from Warning, Prevent, Ignored. 1.2.5

Classification NVARCHAR(2048) NO NO The Classification of the Document. 1.2.5

ClassifierDocId NVARCHAR(512) NO NO The Classifier document id of the document. 1.2.5

ClassifierLicenceError NVARCHAR(128) NO NO Classifier Licence Error message. 1.2.5

Computer NVARCHAR(2048) YES YES Computer name where the Classifier event occurred. 1.2.5

ContentGroupsChecked NVARCHAR(512) NO NO Groups for Document content checks. 1.2.5

DocumentFilename NVARCHAR(2048) NO NO The long path and name of the document. 1.2.5

DocumentSaverId NVARCHAR(512) NO NO The Classifier document saver of the document. 1.2.5

EventId INT YES NO Event Identifier (EventGeneralDescription).9 1.2.5

EventLevelId TINYINT YES NO Event level value.10 1.2.5

Extension NVARCHAR(260) NO NO The filename extension of the document. 1.2.5

FailedSuggestions NVARCHAR(2048) NO NO Suggested classifications not applied to a document. 1.2.5

Keywords NVARCHAR(2048) YES NO Event keywords. 1.2.5

LabelConfiguration NVARCHAR(128) NO NO The name of the Classifier configuration being used. 1.2.5

LabelConfigurationLocation NVARCHAR(512) NO NO The location of the Classifier configuration being used. 1.2.5
Filestore or AD.

9 Not a formal foreign key but should be one of the values in the EventGeneralDescription table.
10 Not a formal foreign key but should be one of the values in the Event Level table.
[Link] 25
 Classifier Reporting Database Schema UM643402

LabelConfigurationLocationPath NVARCHAR(512) NO NO The path and filename of the Classifier configuration being 1.2.5
used.

LabelConfigurationPolicy NVARCHAR(128) NO NO The name of the Classifier Policy being used. 1.2.5

Opcode INT YES NO Event opcode. 1.2.5

OriginalLabel NVARCHAR(2048) NO NO The original label of the email. Only relevant when label 1.2.5
has been changed.

ProcessId INT YES NO Numeric identifier of the process that created the event. 1.2.5

ProviderName INT YES NO Provider Name representing the name of the Classifier 1.2.5
application recording the event.11

Quarantined BIT YES NO Indicates if this record has a problem and has been 1.2.5
quarantined (e.g. 1=TRUE)12.

Reason NVARCHAR(512) NO NO The reason, or challenge text, that the user provided for the 1.2.5
override.

P StagedDocumentEventId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

StagedDocumentRowId UNIQUEIDENTIFIER YES NO Auto-generated Unique Row Identifier. 1.2.5

SuggestedClassification NVARCHAR(2048) NO NO Classification added by a Suggested Classification 1.2.5

Calculation.

TaskCategoryId SMALLINT YES NO TaskCategoryId13. 1.2.5

ThreadId INT YES NO Numeric identifier of the thread that created the event. 1.2.5

11 11Should be one of the ProviderNames in the ApplicationNames table.

12 Quarantining is not currently supported. Record should be written with the values N’FALSE’ for this field.
13 Not a formal foreign key but should be one of the values in the TaskCategories table.

[Link] 26
 Classifier Reporting Database Schema UM643402

TimeCreated DATETIME214 YES NO Creation time of the Classifier event. 1.2.6

Title NVARCHAR(2048) NO NO The filename of the document. 1.2.5

UserAction NVARCHAR(32) NO NO The user action, such as downgrade, that caused the check 1.2.5
to happen.

UserId NVARCHAR(128) YES YES UserId - SID of user creating event. 1.2.5

UserName NVARCHAR(32) NO YES Computed User name - in domain\\user format. 1.2.5

UserSaverId NVARCHAR(512) NO NO The user that saved the document. 1.2.5

14 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 27
 Classifier Reporting Database Schema UM643402

3.1.6 StagedDocumentEventsSelectorValue

Key Name Data Type (Size) Mandatory Anonymised Description Version

SelectorValueOrder SMALLINT YES NO The order of the parsed selector 1.2.5
value in the events label.

StagedDocumentEventId INT YES NO Foreign Key to 1.2.5

StagingDocumentEvent that contains
the parsed Classification value15

P StagedDocumentEventSelectorValueId INT YES NO Auto-generated Primary Key 1.2.5

Identifier.

Value NVARCHAR(256) YES NO The value of the parsed selector 1.2.5

value.

XmlId NVARCHAR(256) YES NO The XML identifier of the parsed 1.2.5

selector value.

15 Foreign key constraint removed in V1.3.0 but column should index the StagedDocumentEvent table
[Link] 28
 Classifier Reporting Database Schema UM643402

3.1.7 StagedEmailEvents

Key Name Data Type (Size) Mandatory Anonymised Description Version

Advisory NVARCHAR(32) NO NO The level of the warning from Warning, Prevent, 1.2.5
Ignored.

Classification NVARCHAR(2048) NO NO The textual representation for the Classification of the 1.2.5
email

ClassifierLicenceError NVARCHAR(256) NO NO Application generated license error message. 1.2.5

Computer NVARCHAR(2048) YES YES Computer name where the Classifier event occurred. 1.2.5

EmailDomain NVARCHAR(510) NO NO SMTP domain part of the SMTP address. 1.2.5

EmailFrom NVARCHAR(2048) NO YES The From email address of the email. 1.2.5

EmailSubject NVARCHAR(512) NO YES The subject of the email. 1.2.5

EventId INT YES NO Event Identifier (EventGeneralDescription).16 1.2.5

EventLevelId TINYINT YES NO Event level value.17 1.2.5

ExchangeAddress NVARCHAR(2048) NO YES Exchange email address. 1.2.5

FailedSuggestions NVARCHAR(2048) NO NO Suggested classifications not applied to a message. 1.2.5

Keywords NVARCHAR(2048) YES NO Event keywords. 1.2.5

LabelConfiguration NVARCHAR(256) NO NO The name of the Classifier configuration being used. 1.2.5

LabelConfigurationLocation NVARCHAR(512) NO NO The location of the Classifier configuration being used, 1.2.5
e.g. Filestore or AD.

16 Not a formal foreign key but should be one of the values in the EventGeneralDescription table.
17 Not a formal foreign key but should be one of the values in the Event Level table.
[Link] 29
 Classifier Reporting Database Schema UM643402

LabelConfigurationLocationPath NVARCHAR(512) NO YES The path and filename of the Classifier configuration 1.2.5
being used.

LabelConfigurationPolicy NVARCHAR(256) NO NO The name of the Classifier policy being used. 1.2.5

Opcode INT YES NO Event opcode. 1.2.5

OriginalLabel NVARCHAR(2048) NO NO The original label of the Document. Only relevant 1.2.5
when label has been changed.

ProcessId INT YES NO Numeric identifier of the process that created the 1.2.5
event.

ProviderName NVARCHAR(256) YES NO Provider Name representing the name of the Classifier 1.2.5
application recording the event.18

Quarantined BIT YES NO Indicates if this record has a problem and has been 1.2.5
quarantined (e.g. 1=TRUE)19.

Reason NVARCHAR(512) NO NO The reason, or challenge text, that the user provided 1.2.5
for the override.

SearchKey NVARCHAR(512) NO NO The Search key of the email. 1.2.5

SizeOfItem NVARCHAR(32) NO NO The size of the email message. 1.2.5

P StagedEmailEventId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

StagedEmailEventRowId UNIQUEIDENTIFIER YES NO Auto-generated Unique Row Identifier. 1.2.5

SuggestedClassification NVARCHAR(2048) NO NO Classification added by a Suggested Classification 1.2.5

Calculation.

18 Should be one of the ProviderNames in the ApplicationNames table.

19 Quarantining is not currently supported. Record should be written with the values N’FALSE’ for this field
[Link] 30
 Classifier Reporting Database Schema UM643402

TaskCategoryId SMALLINT YES NO TaskCategoryId20. 1.2.5

ThreadId INT YES NO Numeric identifier of the thread that created the event 1.2.5

TimeCreated DATETIME221 YES NO Creation time of the Classifier event. 1.2.6

UserAction NVARCHAR(32) NO NO The user action, such as downgrade, that caused the 1.2.5
check to happen.

UserId NVARCHAR(256) YES YES UserId - SID of user creating event. 1.2.5

UserName NVARCHAR(2048) NO YES Computed User name - in domain\\user format. 1.2.5

20 Not a formal foreign key but should be one of the values in the TaskCategories table.
21 Changed from DATETIME to DATETIME2 in V1.2.6
[Link] 31
 Classifier Reporting Database Schema UM643402

3.1.8 StagedEmailEventsSelectorValue

Key Name Data Type (Size) Mandatory Anonymised Description Version

SelectorValueOrder SMALLINT YES NO The order of the parsed selector value in the events label. 1.2.5

StagedEmailEventId INT YES NO Foreign Key to StagingEmailEvents table that contains the 1.2.5
parsed Classification.22

P StagedEmailEventSelectorValueId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

Value NVARCHAR(256) YES NO The value of the parsed selector value. 1.2.5

XmlId NVARCHAR(256) YES NO The xml identifier of the parsed selector value. 1.2.5

22 Foreign key constraint removed in V1.3.0 but column should index the StagedEmailEvents table
[Link] 32
 Classifier Reporting Database Schema UM643402

3.1.9 StagedKnownUsers

Key Name Data Type (Size) Mandatory Anonymised Description Version

23 1.2.5
Attribute1 NVARCHAR(2048) NO NO Configurable attribute 1 of the Known User from AD.

Attribute10 NVARCHAR(2048) NO NO Configurable attribute 10 of the Known User from AD. 1.2.5

Attribute2 NVARCHAR(2048) NO NO Configurable attribute 2 of the Known User from AD. 1.2.5

Attribute3 NVARCHAR(2048) NO NO Configurable attribute 3 of the Known User from AD. 1.2.5

Attribute4 NVARCHAR(2048) NO NO Configurable attribute 4 of the Known User from AD. 1.2.5

Attribute5 NVARCHAR(2048) NO NO Configurable attribute 5 of the Known User from AD. 1.2.5

Attribute6 NVARCHAR(2048) NO NO Configurable attribute 6 of the Known User from AD. 1.2.5

Attribute7 NVARCHAR(2048) NO NO Configurable attribute 7 of the Known User from AD. 1.2.5

Attribute8 NVARCHAR(2048) NO NO Configurable attribute 8 of the Known User from AD. 1.2.5

Attribute9 NVARCHAR(2048) NO NO Configurable attribute 9 of the Known User from AD. 1.2.5

City NVARCHAR(1024) NO NO Location of the AD User. 1.2.5

Company NVARCHAR(64) NO NO Company of the AD User... 1.2.5

Country NVARCHAR(3) NO NO The Country/region code of the AD Users language.24 1.2.5

Department NVARCHAR(64) NO NO Department the AD User... 1.2.5

Description NVARCHAR(1024) NO NO Description of the AD User. 1.2.5

23 Configurable attributes are not currently supported.

24 Two character country code based on the ISO 3166 -1 alpha 2 standard. (As used in Active Directory).
[Link] 33
 Classifier Reporting Database Schema UM643402

Displayname NVARCHAR(64) NO NO Display name of the AD User. 1.2.5

Firstname NVARCHAR(64) NO NO First name of the AD User. 1.2.5

isDeleted VARCHAR(5) NO NO Set to true if the User has been deleted in AD. 1.2.5

JobTitle NVARCHAR(128) NO NO Job title of the AD User. 1.2.5

Lastname NVARCHAR(64) NO NO Last name of the AD User. 1.2.5

legacyExchangeName NVARCHAR(1024) NO NO Legacy Exchange DN of the AD User. 1.2.5

mail NVARCHAR(1142) NO NO Email address of the AD User. 1.2.5

Manager NVARCHAR(1024) NO NO Manager of the AD User. 1.2.5

Office NVARCHAR(128) NO NO Office of the AD User. 1.2.5

proxyAddresses NVARCHAR(2048) NO NO Proxy addresses of the AD User. 1.2.5

SamAccountName NVARCHAR(256) NO NO Legacy NetBIOS form of the AD Users login. 1.2.5

P StagedKnownUserEvent INT YES NO Auto-generated Primary Key Identifier. 1.2.5

Id

StagedKnownUsersRow UNIQUEIDENTIFIE YES NO Auto-generated Unique Row Identifier. 1.2.5

Id R

State NVARCHAR(128) NO NO State or province of AD user. 1.2.5

TempId INT NO NO Internal User Only. 1.2.5

[Link] 34
 Classifier Reporting Database Schema UM643402

TimeDeleted DATETIM225 NO NO Time that the AD service first identifies that the user has 1.2.6
been deleted in AD.

UserGUID VARCHAR(56) YES NO Unique Object GUID of the AD User. 1.2.5

UserPrincipalName NVARCHAR(1024) NO NO UPN of the AD Users internet-style login name. 1.2.5

UserSID VARCHAR(184) YES NO SID value of the AD User. 1.2.5

25 Changed from DATETIME to DATETIME2 in V1.2.6

[Link] 35
 Classifier Reporting Database Schema UM643402

3.1.10 StagedManagementEvents

Key Name Data Type (Size) Mandatory Anonymised Description Version

AdditionalInformation NVARCHAR(512) NO NO Classifier Configuration Additional information. 1.2.5

Computer NVARCHAR(2048) NO YES Computer the MA event was created on. 1.2.5

ConfigPublishedLocation NVARCHAR(512) NO YES Classifier Published Configuration Location. 1.2.5

ConfigPublishedLocationType NVARCHAR(512) NO NO Classifier Configuration Location Type. 1.2.5

ConfigRetrievalLocation NVARCHAR(512) NO YES Location on the Users machine where Classifier 1.2.5
configuration is retrieved from.

ConfigurationLocation NVARCHAR(512) NO YES Location on the Users machine where Classifier 1.2.5
configuration is retrieved from.

EventId INT YES NO Event Identifier (EventGeneralDescription).26 1.2.5

EventLevelId TINYINT YES NO Event level value.27 1.2.5

IssueType INT YES NO Identifier for the Classifier status identified in the event. 28 1.2.5

Keywords NVARCHAR(2048) YES NO Event keywords. 1.2.5

OfficeProductId INT YES NO Identifier for the Office Product identified in the event. 29 1.2.5

OfficeVersion NVARCHAR(256) NO NO Identifier for the version of the Office Product identified in 1.2.5
the event.

Opcode INT YES NO Event opcode. 1.2.5

26 Not a formal foreign key but should be one of the values in the EventGeneralDescription table.
27 Not a formal foreign key but should be one of the values in the Event Level table.
28 Not a formal foreign key but should be one of the values in the IssueTypes table.
29 Not a formal foreign key but should be one of the OfficeProductId in the ApplicationNames table, or be 0.

[Link] 36
 Classifier Reporting Database Schema UM643402

ProcessId INT YES NO Numeric identifier of the process that created the event. 1.2.5

ProviderName NVARCHAR(128) YES NO Provider Name representing the name of the Classifier 1.2.5
application recording the event.30

SIDRunningApplication NVARCHAR(256) NO YES SID of the User running the Office Product identified in the 1.2.5
event.

P StagedManagementEventId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

StagedManagementEventRowId UNIQUEIDENTIFIER YES NO Auto-generated Unique Row Identifier. 1.2.5

TaskCategoryId SMALLINIT YES NO TaskCategoryId31. 1.2.5

ThreadId INT YES NO Numeric identifier of the thread that created the event. 1.2.5

TimeCreated DATETIME232 YES NO Creation time of the Classifier event. 1.2.6

UserId NVARCHAR(128) YES YES User Id (SID). 1.2.5

UserName NVARCHAR(2048) NO YES Computed user name – (domain\\user format) of account 1.2.5
running the MA.

UserNameRunningApplication NVARCHAR(2048) NO YES Computed user name – (domain\\user format) of the user 1.2.5
running the Office Product identified in the event.

WindowsVersion NVARCHAR(246) NO Identifier for the version of Windows identified in the event. 1.2.5

30 Should be one of the ProviderNames in the ApplicationNames table.

31 Not a formal foreign key but should be one of the values in the TaskCategories table.
32 Changed from DATETIME to DATETIME2 in V1.2.6

[Link] 37
 Classifier Reporting Database Schema UM643402

3.1.11 StagedRecipients

Key Name Data Type (Size) Mandatory Anonymised Description Version

ExchangeAddress NVARCHAR(2048) NO YES Exchange email address. 1.2.5

RecipientStatusDescription NVARCHAR(32) YES NO Description of the status of the recipient in clearance 1.2.5
checks. Should be one of FAILED, SUCCEEDED, And
INDETERMINATE.

RecipientType NVARCHAR(6) YES NO Type of recipient (TO, CC or BCC). 1.2.5

SMTPAddress NVARCHAR(1142) NO YES Full hostname@domain SMTP address. 1.2.5

SMTPDomain NVARCHAR(510) NO NO SMTP domain part of the SMTP address. 1.2.5

StagedRecipientEmailEventId INT YES NO Foreign Key to the StagedEmailEvent table.33 1.2.5

P StagedRecipientId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

StagedRecipientRowId UNIQUEIDENTIFIER YES NO Unique identifier for the Recipient row. 1.2.5

33 Foreign key constraint removed in V1.3.0 but column should index the StagedEmailEvents table
[Link] 38
 Classifier Reporting Database Schema UM643402

3.2 ClassifierWorking
3.2.1 Attachments

Key Name Data Type (Size) Mandatory Anonymised Description Version

F AttachmentEmailEventId BIGINT34 YES NO Foreign Key to the EmailEvent table. 1.2.5

P AttachmentId BIGINT35 YES NO Auto-generated Primary Key Identifier. 1.2.5

AttachmentNumber SMALLINT YES NO unique number of the attachment for each event 1.2.5

AttachmentStatusDescription NVARCHAR(32) YES NO Description of the status of the attachment in HWM checks. 1.2.5
Must be one of FAILED, SUCCEEDED, INACCESSIBLE

Classification NVARCHAR(2048) NO NO The Classification of the attached document. 1.2.5

ClassifierDocId NVARCHAR(128) NO NO The ClassifierDocId of the attached document. 1.2.5

Extension NVARCHAR(260) NO NO The filename extension of the attached document. 1.2.5

Title NVARCHAR(2048) YES YES The filename of the attached document. 1.2.5

34 Changed to BIGINT in V1.3.0

35 Changed to BIGINT in V1.3.0
[Link] 39
 Classifier Reporting Database Schema UM643402

3.2.2 AttachmentSelectorValues

Key Name Data Type Mandatory Anonymised Description Version

(Size)
F AttachmentId BIGINT36 YES NO Foreign Key to the AttachmentTable to identify the attachment. 1.2.5

P AttachmentSelectorValuesId BIGINT37 YES NO Auto-generated Primary Key Identifier. 1.2.5

NumberofValues SMALLINT YES NO Number of selectors in the attachments classification, maximum 1.2.5
is three at the moment.

SelectorValue1Id INT NO NO Index of the first selector value parsed from the attachments 1.2.5
classification.38

SelectorValue2Id INT NO NO Index of the second selector value parsed from the attachments 1.2.5
classification.

SelectorValue3Id INT NO NO Index of the third selector value parsed from the attachments 1.2.5
classification.

36 Changed to BIGINT in V1.3.0

37 Changed to BIGINT in V1.3.0
38 SelectorValue1Id, SelectorValue2Id and SelectorValue3Id index records in the SelectorValue table but are not defined as foreign keys because one or two values could

be NULL if the parsed Attachment Classification has less than three selector values.
[Link] 40
 Classifier Reporting Database Schema UM643402

3.2.3 AttachmentToSelectorValues

Key Name Data Type Mandatory Anonymised Description Version

(Size)
F AttachmentId BIGINT39 YES NO Foreign Key to the Attachment Table to identify the attachment. 1.2.5

P AttachmentToSelectorId BIGINT40 YES NO Auto-generated Primary Key Identifier. 1.2.5

F SelectorValueId INT YES NO Foreign Key to the parsed selector value table to identify the selector 1.2.5
value in the Attachments label.

SelectorValueOrder SMALLINT YES NO The order of the parsed selector value in the attachments label. 1.2.5

39 Changed to BIGINT in V1.3.0

40 Changed to BIGINT in V1.3.0
[Link] 41
 Classifier Reporting Database Schema UM643402

3.2.4 Computers

Key Name Data Type (Size) Mandatory Anonymised Description Version

Attribute1 NVARCHAR(2048) NO NO Configurable attribute 1 of the computer from AD.41 1.2.5

Attribute10 NVARCHAR(2048) NO NO Configurable attribute 10 of the computer from AD. 1.2.5

Attribute2 NVARCHAR(2048) NO NO Configurable attribute 2 of the computer from AD. 1.2.5

Attribute3 NVARCHAR(2048) NO NO Configurable attribute 3 of the computer from AD. 1.2.5

Attribute4 NVARCHAR(2048) NO NO Configurable attribute 4 of the computer from AD. 1.2.5

Attribute5 NVARCHAR(2048) NO NO Configurable attribute 5 of the computer from AD. 1.2.5

Attribute6 NVARCHAR(2048) NO NO Configurable attribute 6 of the computer from AD. 1.2.5

Attribute7 NVARCHAR(2048) NO NO Configurable attribute 7 of the computer from AD. 1.2.5

Attribute8 NVARCHAR(2048) NO NO Configurable attribute 8 of the computer from AD. 1.2.5

Attribute9 NVARCHAR(2048) NO NO Configurable attribute 9 of the user from AD. 1.2.5

Company NVARCHAR() NO NO Company. 1.2.5

ComputerGUID VARCHAR(56) YES NO AD GUID of computer. 1.2.5

P ComputerId BIGINT42 YES NO Auto-generated Primary Key Identifier. 1.2.5

ComputerName NVARCHAR(64) YES NO Pre Windows 2000 Computer Name. 1.2.5

DCType NVARCHAR(512) YES NO DC Type. 1.2.5

Description NVARCHAR(1024) NO NO Description. 1.2.5

41 Configurable attributes are not currently supported.

42 Changed to BIGINT in V1.3.0
[Link] 42
 Classifier Reporting Database Schema UM643402

DNSName NVARCHAR(2048) YES NO DNS host name of the computer. 1.2.5

isDeleted VARCHAR(5) NO NO Set to true if the computer has been deleted in AD. 1.2.5

OperatingSystemName NVARCHAR(512) NO NO Operating System Name. 1.2.5

OperatingSystemServicePack NVARCHAR(512) NO NO Operating System Service Pack. 1.2.5

OperatingSystemVersion NVARCHAR(512) NO NO Operating System Version. 1.2.5

Site NVARCHAR(2048) NO NO Physical location or network, usually defined only for 1.2.5
Domain Controllers.

TimeDeleted DATETIME243 NO NO Time that the AD service first identifies that the 1.2.6
computer has been deleted in AD.

43 Changed to DATETIME2 in V1.2.6

[Link] 43
 Classifier Reporting Database Schema UM643402

3.2.5 DocumentEvents

Key Name Data Type (Size) Mandatory Anonymised Description Version

ClassifierDocId NVARCHAR(512) NO NO The Classifier document id of the document. 1.2.5

P DocumentEventId BIGINT44 YES NO Auto-generated Primary Key Identifier. 1.2.5

DocumentFilename NVARCHAR(2048) NO YES The long path and name of the document 1.2.5

DocumentSaverId NVARCHAR(512) NO NO The Classifier document saver of the document. 1.2.5

Extension NVARCHAR(260) NO NO The filename extension of the document 1.2.5

F SystemEventId BIGINT45 YES NO Foreign Key to the SystemEvent table. 1.2.5

Title NVARCHAR(2048) NO YES The filename of the document. 1.2.5

UserSaverId NVARCHAR(512) NO YES The user that saved the document. 1.2.5

44 Changed to BIGINT in V1.3.0

45 Changed to BIGINT in V1.3.0
[Link] 44
 Classifier Reporting Database Schema UM643402

3.2.6 EmailAddresses

Key Name Data Type (Size) Mandatory Anonymised Description Version

P EmailAddressId BIGINT46 YES NO Auto-generated Primary Key Identifier. 1.2.5

ExchangeAddress NVARCHAR(2048) NO47 YES Exchange email address. 1.2.5

SMTPAddress NVARCHAR(2048) NO YES Full hostname@domain SMTP address. 1.2.5

SMTPDomain NVARCHAR(510) NO NO SMTP domain part of the SMTP address. 1.2.5

46 Changed to BIGINT in V1.3.0

47 A record should contain either an Exchange or SMTP email address. This rule is not enforced by mandatory fields.
[Link] 45
 Classifier Reporting Database Schema UM643402

3.2.7 EmailEvents

Key Name Data Type (Size) Mandatory Anonymised Description Version

P EmailEventId BIGINT48 YES NO Auto-generated Primary Key Identifier. 1.2.5

F EmailFromId BIGINT49 YES NO Foreign Key to the EmailAddress table. 1.2.5

EmailSubject NVARCHAR(512) NO YES The subject of the email. 1.2.5

SearchKey NVARCHAR(512) NO NO The Search key of the email. 1.2.5

F SystemEventId INT YES NO Foreign Key to the SystemEvents table. 1.2.5

48 Changed to BIGINT in V1.3.0

49 Changed to BIGINT in V1.3.0
[Link] 46
 Classifier Reporting Database Schema UM643402

3.2.8 Errors

Key Name Data Type (Size) Mandatory Anonymised Description Version

ErrorLine NVARCHAR(MAX) NO NO Line number in the stored procedure where the error 1.2.5
occurred.

ErrorMessage NVARCHAR(MAX) NO NO Text of the message that caused the CATCH block of the 1.2.5
stored procedure to be run.

ErrorNumber INT NO NO Error number of the error message that caused the 1.2.5
CATCH block of the stored procedure to be run.

ErrorPlace NVARCHAR(500) NO NO Unused. 1.2.5

ErrorProcedure NVARCHAR(MAX) NO NO Name of the stored procedure where the error occurred. 1.2.5

ErrorSeverity INT NO NO Error severity of the error message that caused the 1.2.5
CATCH block of the stored procedure to be run.

ErrorState INT NO NO State number of the error message that caused the 1.2.5
CATCH block of the stored procedure to be run.

[Link] 47
 Classifier Reporting Database Schema UM643402

3.2.9 EventCheckDetails

Key Name Data Type (Size) Mandatory Anonymised Description Version

Advisory NVARCHAR(32) NO NO The level of the warning from Warning, Prevent, Ignored. 1.2.5

ContentGroupsChecked NVARCHAR(32) NO NO Groups for Document content checks. 1.2.5

P EventCheckDetailId BIGINT50 YES NO Auto-generated Primary Key Identifier. 1.2.5

OriginalLabel NVARCHAR(2048) NO NO The original label of the label change event. Only relevant 1.2.5
when label has been changed.

Reason NVARCHAR(1024) NO NO The reason, or challenge text, that the user provided for the 1.2.5
override.

SizeOfItem VARCHAR(32) NO NO The size of the email message. 1.2.5

F SystemEventId BIGINT51 YES NO Foreign Key to the SystemEvent table. 1.2.5

UserAction NVARCHAR(32) NO NO The user action, such as downgrade, that caused the check to 1.2.5
happen.

50 Changed to BIGINT in V1.3.0

51 Changed to BIGINT in V1.3.0
[Link] 48
 Classifier Reporting Database Schema UM643402

3.2.10 EventGeneralDescriptions

Key Name Data Type (Size) Mandatory Anonymised Description Version

EventGeneralDescription NVARCHAR(1024) YES NO The text of the general event e.g. "Classifier Initialised". 1.2.5

P EventId INT YES NO Primary Key and the Events Identifier. 1.2.5

EventStatusDescription NVARCHAR(32) YES NO The outcome of check events. 1.2.5

EventType NVARCHAR(64) YES NO The type of the event. One of "DocumentEvent", 1.2.5
"DocumentCheckEvent", "AdminEvent" etc.

This table is defined with the following values

EventId EventGeneralDescription EventStatusDescription EventType
1000 Classifier Initialised INFO GeneralEvent

1001 Classifier is running in test mode INFO GeneralEvent

1002 Unable to find valid Classifier configuration INFO GeneralEvent

1005 Classifier licence error INFO GeneralEvent

1006 The .Net 3.5 framework is not installed INFO GeneralEvent

1101 Sending an item INFO EmailEvent

1102 Saving an item INFO EmailEvent

1103 Opening an item INFO EmailEvent

1104 Closing an item INFO EmailEvent

1105 Printing an item INFO EmailEvent

[Link] 49
 Classifier Reporting Database Schema UM643402

1106 Failed to apply RMS policy INFO EmailEvent

1107 Failed to apply SMIME INFO EmailEvent

1108 Failed to access a ZIP file attachment INFO EmailEvent

1109 Originator clearance check FAILED EmailCheckEvent

1110 Originator clearance check SUCCEEDED EmailCheckEvent

1112 Recipient clearance check FAILED EmailCheckEvent

1113 Recipient clearance check SUCCEEDED EmailCheckEvent

1114 Message label validation check FAILED EmailCheckEvent

1115 Message label validation check SUCCEEDED EmailCheckEvent

1116 Attachment check FAILED EmailCheckEvent

1117 Attachment check SUCCEEDED EmailCheckEvent

1118 Label upgrade check FAILED EmailCheckEvent

1119 Label upgrade check SUCCEEDED EmailCheckEvent

1120 Label downgrade check FAILED EmailCheckEvent

1121 Label downgrade check SUCCEEDED EmailCheckEvent

1123 Label change check FAILED EmailCheckEvent

1124 Label change check SUCCEEDED EmailCheckEvent

1125 Label has been auto-upgraded due to a portion marking change INFO EmailEvent

1126 Warning failure has been overridden INFO EmailEvent

[Link] 50
 Classifier Reporting Database Schema UM643402

1127 Label has been auto-upgraded due to an attachment containing a higher label than the item INFO EmailEvent

1128 Label of an existing item in folder has been set INFO EmailEvent

1129 Label of an existing item in folder has been changed INFO EmailEvent

1130 Default label check FAILED EmailCheckEvent

1131 Default label check SUCCEEDED EmailCheckEvent

1132 Requesting user confirmation INFO EmailEvent

1133 Requesting user confirmation INFO EmailEvent

1134 Message content check SUCCEEDED EmailCheckEvent

1135 Message content check FAILED EmailCheckEvent

1136 Item has been added INFO DocumentEvent

1137 Item has been updated INFO DocumentEvent

1138 SMIME applied to item INFO EmailEvent

1139 Maximum subject length check SUCCEEDED EmailCheckEvent

1140 Maximum subject length check FAILED EmailCheckEvent

1141 Minimum subject length check SUCCEEDED EmailCheckEvent

1142 Minimum subject length check FAILED EmailCheckEvent

1143 Recipient type check SUCCEEDED EmailCheckEvent

1144 Recipient type check FAILED EmailCheckEvent

1145 Number of recipients check SUCCEEDED EmailCheckEvent

[Link] 51
 Classifier Reporting Database Schema UM643402

1146 Number of recipients check FAILED EmailCheckEvent

1147 Message size check SUCCEEDED EmailCheckEvent

1148 Message size check FAILED EmailCheckEvent

1149 Failed to apply RMS policy INFO EmailEvent

1150 Applied RMS policy INFO EmailEvent

1151 User has initiated a "Reply to all" INFO EmailEvent

1152 Message mandatory selector check FAILED EmailCheckEvent

1153 Message mandatory selector check SUCCEEDED EmailCheckEvent

1154 Message response recipients check FAILED EmailCheckEvent

1155 Message label expiration check FAILED EmailCheckEvent

1156 McAfee check failed WARNING EmailCheckEvent

1157 McAfee check succeeded INFO EmailCheckEvent

1158 Unlabelled attachment check ERROR EmailCheckEvent

1159 Unlabelled attachment check INFO EmailCheckEvent

1160 Suggested Classification not applied INFO EmailCheckEvent

1161 Suggested Classification applied automatically INFO EmailCheckEvent

1162 Suggested Classification check failed ERROR EmailCheckEvent

1163 Suggested Classification applied manually INFO EmailCheckEvent

1164 Suggested Classification calculation failed ERROR EmailCheckEvent

[Link] 52
 Classifier Reporting Database Schema UM643402

1200 Saving a PowerPoint presentation INFO DocumentEvent

1201 Opening a PowerPoint presentation INFO DocumentEvent

1202 Closing a PowerPoint presentation INFO DocumentEvent

1203 A PowerPoint print has been initiated INFO DocumentEvent

1302 PowerPoint label validation check FAILED DocumentCheckEvent

1303 PowerPoint label validation check SUCCEEDED DocumentCheckEvent

1304 PowerPoint label upgrade check FAILED DocumentCheckEvent

1305 PowerPoint label upgrade check SUCCEEDED DocumentCheckEvent

1306 PowerPoint label downgrade check FAILED DocumentCheckEvent

1307 PowerPoint label downgrade check SUCCEEDED DocumentCheckEvent

1308 PowerPoint label change check FAILED DocumentCheckEvent

1309 PowerPoint label change check SUCCEEDED DocumentCheckEvent

1310 A PowerPoint warning failure has been overridden INFO DocumentEvent

1400 Saving a Word document INFO DocumentEvent

1401 Opening a Word document INFO DocumentEvent

1402 Closing a Word document INFO DocumentEvent

1403 A Word document print has been initiated INFO DocumentEvent

1502 Word label validation check FAILED DocumentCheckEvent

1503 Word label validation check SUCCEEDED DocumentCheckEvent

[Link] 53
 Classifier Reporting Database Schema UM643402

1504 Word label upgrade check FAILED DocumentCheckEvent

1505 Word label upgrade check SUCCEEDED DocumentCheckEvent

1506 Word label downgrade check FAILED DocumentCheckEvent

1507 Word label downgrade check SUCCEEDED DocumentCheckEvent

1508 Word label change check FAILED DocumentCheckEvent

1509 Word label change check SUCCEEDED DocumentCheckEvent

1510 A Word warning failure has been overridden INFO DocumentEvent

1511 A Word document label has been auto-upgraded due to a portion marking change INFO DocumentEvent

1600 Saving an Excel workbook INFO DocumentEvent

1601 Opening an Excel workbook INFO DocumentEvent

1602 Closing an Excel workbook INFO DocumentEvent

1702 Excel label validation check FAILED DocumentCheckEvent

1703 Excel label validation check SUCCEEDED DocumentCheckEvent

1704 Excel label upgrade check FAILED DocumentCheckEvent

1705 Excel label upgrade check SUCCEEDED DocumentCheckEvent

1706 Excel label downgrade check FAILED DocumentCheckEvent

1707 Excel label downgrade check SUCCEEDED DocumentCheckEvent

1708 Excel label change check FAILED DocumentCheckEvent

1709 Excel label change check SUCCEEDED DocumentCheckEvent

[Link] 54
 Classifier Reporting Database Schema UM643402

1710 An Excel warning failure has been overridden INFO DocumentEvent

1900 An item reclassification has succeeded INFO DocumentEvent

1901 An item reclassification has failed INFO DocumentEvent

2000 General Classifier issue INFO GeneralEvent

2100 File Classifier labelled INFO DocumentEvent

3000 Saving an item INFO DocumentEvent

3001 Opening an item INFO DocumentEvent

3002 Closing an item INFO DocumentEvent

3003 An item print has been initiated INFO DocumentEvent

3004 Document label validation check FAILED DocumentCheckEvent

3005 Document label validation check SUCCEEDED DocumentCheckEvent

3006 Label upgrade check FAILED DocumentCheckEvent

3007 Label upgrade check SUCCEEDED DocumentCheckEvent

3008 Label downgrade check FAILED DocumentCheckEvent

3009 Label downgrade check SUCCEEDED DocumentCheckEvent

3010 Label change check FAILED DocumentCheckEvent

3011 Label change check SUCCEEDED DocumentCheckEvent

3012 Warning failure has been overridden INFO DocumentEvent

3013 Default label check SUCCEEDED DocumentCheckEvent

[Link] 55
 Classifier Reporting Database Schema UM643402

3014 Default label check FAILED DocumentCheckEvent

3015 Requesting user confirmation INFO DocumentEvent

3016 Requesting user confirmation INFO DocumentEvent

3017 Failed to apply RMS policy INFO DocumentEvent

3018 Applied RMS policy INFO DocumentEvent

3019 Author label change check FAILED DocumentCheckEvent

3020 Author label change check SUCCEEDED DocumentCheckEvent

3021 Author property set on document INFO DocumentEvent

3022 Document mandatory selector check FAILED DocumentCheckEvent

3023 Document mandatory selector check SUCCEEDED DocumentCheckEvent

3024 Document content check SUCCEEDED DocumentCheckEvent

3025 Document content check FAILED DocumentCheckEvent

3026 Document label expiration check FAILED DocumentCheckEvent

3030 Suggested Classification not applied INFO DocumentCheckEvent

3031 Suggested Classification applied automatically INFO DocumentCheckEvent

3032 Suggested Classification check failed ERROR DocumentCheckEvent

3033 Suggested Classification applied manually INFO DocumentCheckEvent

3034 Suggested Classification calculation failed ERROR DocumentCheckEvent

5007 Label configuration has been retrieved INFO AdminEvent

[Link] 56
 Classifier Reporting Database Schema UM643402

5008 Label configuration has been published INFO AdminEvent

5009 Failed to publish label configuration INFO AdminEvent

5011 Global settings have been changed INFO AdminEvent

5013 Audit settings have been changed INFO AdminEvent

5014 Audit settings have been changed INFO AdminEvent

5016 SMTP domain clearance has been changed INFO AdminEvent

5017 User clearance has been changed INFO AdminEvent

5018 Marking format has been created INFO AdminEvent

5019 Marking format has been copied INFO AdminEvent

5020 Policy has been copied INFO AdminEvent

5021 Policy has been deleted INFO AdminEvent

5022 Policy has been edited INFO AdminEvent

5023 Policy has been created INFO AdminEvent

5024 Marking format has been created INFO AdminEvent

5025 Label configuration has been created INFO AdminEvent

5026 Selector library has changed INFO AdminEvent

5027 Marking format has been changed INFO AdminEvent

5028 Policy selector has been changed INFO AdminEvent

5029 Policy rule has been changed INFO AdminEvent

[Link] 57
 Classifier Reporting Database Schema UM643402

5030 Label configuration has been deleted INFO AdminEvent

5031 Label configuration has been renamed INFO AdminEvent

5033 Configuration settings have been changed INFO AdminEvent

5034 Content library has been changed INFO AdminEvent

5035 Classifier administration tool has been initialised INFO AdminEvent

5036 Classifier administration tool is closing down INFO AdminEvent

5037 User interface definitions have been changed INFO AdminEvent

6000 Successfully updated clearance details in user certificate INFO AdminEvent

8004 Sharepoint item changed SUCCEEDED DocumentEvent

8005 Sharepoint item changed FAILED DocumentEvent

8006 Sharepoint apply default label SUCCEEDED DocumentEvent

8007 Sharepoint apply default label FAILED DocumentEvent

8010 Sharepoint quarantine move SUCCEEDED DocumentEvent

8011 Sharepoint quarantine move FAILED DocumentEvent

8014 Sharepoint modify permissions for quarantine SUCCEEDED DocumentEvent

8015 Sharepoint modify permissions for quarantine FAILED DocumentEvent

[Link] 58
 Classifier Reporting Database Schema UM643402

3.2.11 EventGeneralDetails

Key Name Data Type (Size) Mandatory Anonymised Description Version

ClassifierLicenceError NVARCHAR(256) NO NO The description of a Classifier Licence error. 1.2.5

P EventGeneralDetailId BIGINT52 YES NO Auto-generated Primary Key Identifier. 1.2.5

LabelConfiguration NVARCHAR(128) NO NO The name of the Classifier configuration being used. 1.2.5

LabelConfigurationLocation NVARCHAR(1024) NO NO The location of the Classifier configuration being 1.2.5

used. FileSystem or AD.

LabelConfigurationLocationPath NVARCHAR(1024) NO YES53 The path and filename of the Classifier configuration 1.2.5
being used.

LabelConfigurationPolicy NVARCHAR(128) NO NO The name of the Classifier policy being used. 1.2.5

F SystemEventId INT YES NO Foreign Key to the SystemEvent table. 1.2.5

52 Changed to BIGINT in V1.3.0

53 Anonymised when LabelConfigurationLocation = FileSystem
[Link] 59
 Classifier Reporting Database Schema UM643402

3.2.12 EventLevels

Key Name Data Type (Size) Mandatory Anonymised Description Version

EventLevelDescription NVARCHAR(32) YES NO Standard Event Viewer levels of Information, Warning, 1.2.5
Error, Critical, and Verbose.

P EventLevelId TINYINT YES NI Event Level (Primary Key) Identifier. 1.2.5

This table is defined with the following values

EventLevelIs EvetLevelDescription
0 Verbose

1 Critical

2 Error

3 Warning

4 Information

[Link] 60
 Classifier Reporting Database Schema UM643402

3.2.13 EventSelectorValues

Key Name Data Type Mandatory Anonymised Description Version

(Size)
P EventSelectorValuesId BIGINT54 YES NO Auto-generated Primary Key Identifier. 1.2.5

NumberofValues SMALLINT YES NO Number of selectors in the events classification, current 1.2.5
maximum is three.

SelectorValue1Id INT NO NO Index of first selector value index parsed from the events 1.2.5
classification.55

SelectorValue2Id INT NO NO Index of second selector value parsed from the events 1.2.5
classification.

SelectorValue3Id INT NO NO Index of third selector value parsed from the events 1.2.5
classification.

F SystemEventId BIGINT56 YES NO Foreign Key to the SystemEvent Table to identify the event. 1.2.5

54 Changed to BIGINT in V1.3.0

55 55SelectorValue1Id, SelectorValue2Id and SelectorValue3Id index records in the SelectorValue table but are not defined as foreign keys because one or two values
could be NULL if the parsed Email or Document Classification has less than three selector values.
56 Changed to BIGINT in V1.3.0

[Link] 61
 Classifier Reporting Database Schema UM643402

3.2.14 EventToSelectorValues

Key Name Data Type Mandatory Anonymised Description Version

(Size)
P EventToSelectorId BIGINT57 YES NO Auto-generated Primary Key Identifier. 1.2.5

F SelectorValueId INT YES NO Foreign Key to the parsed selector value table to identify the 1.2.5
selector value in the events label.

SelectorValueOrder SMALLINT YES NO The order of the parsed selector value in the events label. 1.2.5

F SystemEventId BIGINT58 YES NO Foreign Key to the SystemEvent Table to identify the event. 1.2.5

57 Changed to BIGINT in V1.3.0

58 Changed to BIGINT in V1.3.0
[Link] 62
 Classifier Reporting Database Schema UM643402

3.2.15 IssueTypes

Key Name Data Type (Size) Mandatory Anonymised Description Version

IssueDescription NVARCHAR(256) YES NO Issue Type Description. 1.2.5

P IssueTypeEntryId INT YES NO Auto-generated Primary key identifier. 1.2.5

IssueTypeId INT YES NO Issue Type Event Id. 1.2.5

This table is defined with the following values

IssueTypeId IssueDescription
0 59

1 Office product running without Classifier

2 Classifier running in SafeMode

3 Classifier loaded by an Office Product

4 Unknown Classifier Issue60

59 Empty string implying no issue.

60 Version 1.0 & 1.1 Databases only.
[Link] 63
 Classifier Reporting Database Schema UM643402

3.2.16 KnownUsers

Key Name Data Type (Size) Mandatory Anonymised Description Version

Attribute1 NVARCHAR(2048) NO NO Configurable attribute 1 of the user from AD.61 1.2.5

Attribute10 NVARCHAR(2048) NO NO Configurable attribute 10 of the user from AD. 1.2.5

Attribute2 NVARCHAR(2048) NO NO Configurable attribute 2 of the user from AD. 1.2.5

Attribute3 NVARCHAR(2048) NO NO Configurable attribute 3 of the user from AD. 1.2.5

Attribute4 NVARCHAR(2048) NO NO Configurable attribute 4 of the user from AD. 1.2.5

Attribute5 NVARCHAR(2048) NO NO Configurable attribute 5 of the user from AD. 1.2.5

Attribute6 NVARCHAR(2048) NO NO Configurable attribute 6 of the user from AD. 1.2.5

Attribute7 NVARCHAR(2048) NO NO Configurable attribute 7 of the user from AD. 1.2.5

Attribute8 NVARCHAR(2048) NO NO Configurable attribute 8 of the user from AD. 1.2.5

Attribute9 NVARCHAR(2048) NO NO Configurable attribute 9 of the user from AD. 1.2.5

City NVARCHAR(1024) NO NO Location of the AD User. 1.2.5

Company NVARCHAR(64) NO NO Company the AD User works in. 1.2.5

Country NVARCHAR(3) NO NO The Country/region code of the AD Users language. 62 1.2.5

Department NVARCHAR(64) NO NO Department the AD User works in. 1.2.5

Description NVARCHAR(1024) NO NO Description of the AD User. 1.2.5

Displayname NVARCHAR(64) NO NO Display name of the AD User. 1.2.5

61 Configurable attributes are not currently supported.

62 Two character country code based on the ISO 3166 -1 alpha 2 standard. (As used in Active Directory).
[Link] 64
 Classifier Reporting Database Schema UM643402

F EmailAddressId BIGINT63 NO NO Foreign Key to the EmailAddress table. 1.2.5

Firstname NVARCHAR(64) NO NO First name of the AD User. 1.2.5

isDeleted VARCHAR(5) NO NO Set to true if the User has been deleted in AD. 1.2.5

JobTitle NVARCHAR(128) NO NO Job title of the AD User. 1.2.5

P KnownUserId BIGINT64 YES YES Auto-generated Primary Key Identifier. 1.2.5

Lastname NVARCHAR(64) NO NO Last name of the AD User. 1.2.5

legacyExchangeName NVARCHAR(1024) NO NO Legacy Exchange DN of AD User. 1.2.5

Manager NVARCHAR(1024) NO NO Manager of the AD User. 1.2.5

Office NVARCHAR(128) NO NO Office of the AD User. 1.2.5

proxyAddresses NVARCHAR(2048) NO NO Proxy addresses of the AD User. 1.2.5

SamAccountName NVARCHAR(256) NO NO Legacy NetBIOS form of the AD Users login. 1.2.5

State NVARCHAR(128) NO NO State or province of the AD Users location. 1.2.5

TimeDeleted DATETIME265 NO NO Time that the AD service first identifies that the user has been 1.2.6
deleted in AD.

UserGUID VARCHAR(56) YES NO Unique Object GUID value of the AD user. 1.2.5

UserPrincipalName NVARCHAR(1024) NO NO UPN of the AD Users internet-style login name. 1.2.5

UserSID VARCHAR(184) YES NO SID value of the AD user 1.2.5

63 Changed to BIGINT in V1.3.0

64 Changed to BIGINT in V1.3.0
65 Changed from DATETIME to DATETIME2 in V1.2.6

[Link] 65
 Classifier Reporting Database Schema UM643402

3.2.17 ManagementEvents

Key Name Data Type (Size) Mandatory Anonymised Description Version

IssueType NVARCHAR(256) YES NO Reference to the IssueType table.66 1.2.5

P ManagementEventId BIGINT67 YES NO Auto-generated Primary Key Identifier. 1.2.5

OfficeProductName NVARCHAR(256) YES NO Name of the Office Product identified in the event.68 1.2.5

OfficeVersion NVARCHAR(256) NO NO Identifier for the version of the Office Product identified in the 1.2.5
event.

SIDRunningApplication NVARCHAR(256) YES YES SID of the User running the Office Product identified in the 1.2.5
event.

F SystemEventId BIGINT69 YES NO Foreign Key to the SystemEvent table. 1.2.5

UserNameRunningApplication NVARCHAR(2048) NO YES Computed user name – (domain\\user format) of the user 1.2.5
running the Office Product identified in the event.

WindowsVersion NVARCHAR(256) NO NO Identifier for the version of Windows identified in the event. 1.2.5

66 Value should be one of the Issue Descriptions from the IssueTypes table.
67 Changed to BIGINT in V1.3.0
68 Value should be one of the ProviderNames in the ApplicationNames table.
69 Changed to BIGINT in V1.3.0

[Link] 66
 Classifier Reporting Database Schema UM643402

3.2.18 Recipients

Key Name Data Type (Size) Mandatory Anonymised Description Version

F EmailAddressId BIGINT70 YES NO Foreign Key to the EmailAddress table. 1.2.5

F RecipientEmailEventId BIGINT71 YES NO Foreign Key to the EmailEvent table. 1.2.5

P RecipientId BIGINT72 YES NO Auto-generated Primary Key Identifier. 1.2.5

RecipientStatusDescription NVARCHAR(32) YES NO Description of the status of the recipient in clearance checks. 1.2.5
Should be one of FAILED, SUCCEEDED, And
INDETERMINATE.

F RecipientTypeId TINYINT YES NO Foreign Key to the RecipientType table. 1.2.5

70 Changed to BIGINT in V1.3.0

71 Changed to BIGINT in V1.3.0
72 Changed to BIGINT in V1.3.0

[Link] 67
 Classifier Reporting Database Schema UM643402

3.2.19 RecipientTypes

Key Name Data Type (Size) Mandatory Anonymised Description Version

RecipientTypeDescription NVARCHAR(16) YES (UNIQUE) NO Textual description of the recipient type e.g. "TO". 1.2.5

P RecipientTypeId TINYINT YES NO Primary key identifier of the recipient type. 0=TO;1=CC;2=BCC. 1.2.5

The table is defined with the following values

RecipientTypeId RecipientTypeDescription
0 TO

1 CC

2 BCC

[Link] 68
 Classifier Reporting Database Schema UM643402

3.2.20 SelectorValues

Key Name Data Type (Size) Mandatory Anonymised Description Version

AlternativeName1 NVARCHAR(128) NO NO Alternative Name of the Selector Value. 1.2.5

AlternativeName2 NVARCHAR(128) NO NO Alternative Name of the Selector Value. 1.2.5

AlternativeName3 NVARCHAR(128) NO NO Alternative Name of the Selector Value. 1.2.5

ControlName NVARCHAR(128) NO NO Name of the Control. 1.2.5

Name NVARCHAR(128) YES NO Name of the Selector Value. 1.2.5

PortionMark NVARCHAR(128) NO NO Optional Portion Mark. 1.2.5

P SelectorValueId INT YES NO Auto-generated Primary Key Identifier. 1.2.5

XmlId NVARCHAR(256) YES NO XML (guid) identifier of the Selector Value. 1.2.5

[Link] 69
 Classifier Reporting Database Schema UM643402

3.2.21 SystemEvents

Key Name Data Type (Size) Mandatory Anonymised Description Version

Application NVARCHAR(128) NO NO Application that caused the event - maps from 1.2.5
ProviderName to application name e.g. Word73

Classification NVARCHAR(2048) NO NO The textual representation of the Classification of the 1.2.5

information that this event relates to.

Computer NVARCHAR(2048) YES YES Computer name where the Classifier event occurred. 1.2.5

EventId INT YES NO Event Identifier (EventGeneralDescription).74 1.2.5

F EventLevelId TINYINT YES NO Foreign Key to the EventLevel table. 1.2.5

FailedSuggestions NVARCHAR(2048) NO NO Suggested classifications not applied to a document or 1.2.5

message.

Keywords NVARCHAR(2048) NO NO Event keywords. 1.2.5

Opcode INT YES NO Event opcode. 1.2.5

OriginRowId UNIQUEIDENTIFIER YES NO Row Identifier of the original entry in the appropriate 1.2.5
Staging table, for example the row identifier of the
StagingEmailEvent table if the event is an email event.

ProviderName NVARCHAR(256) YES NO Provider Name representing the name of the Classifier 1.2.5
application recording the event.75

SuggestedClassification NVARCHAR(2048) NO NO Classification added by a suggested classification 1.2.5

calculation.

73 Not a formal foreign key but should be one of the ProviderNames in the ApplicationNames table.
74 Not a formal foreign key but should be one of the values in the EventGeneralDescription table.
75 Should be one of the ProviderNames in the ApplicationNames table.

[Link] 70
 Classifier Reporting Database Schema UM643402

P SystemEventId BIGINT76 YES NO Auto-generated Primary Key Identifier. 1.2.5

F TaskCategoryId SMALLINT YES NO Foreign Key to the TaskCategory table. 1.2.5

TimeCreated DATETIME277 YES NO Creation time of the Classifier event. 1.2.6

UserName NVARCHAR(2048) NO NO Computed User name - in domain\\user format. 1.2.5

UserSID NVARCHAR(128) YES YES UserId - SID of user creating event. 1.2.5

76 Changed to BIGINT in V1.3.0

77 Changed from DATETIME to DATETIME2 in V1.2.6
[Link] 71
 Classifier Reporting Database Schema UM643402

3.2.22 TaskCategories

Key Name Data Type (Size) Mandatory Anonymised Description Version

TaskCategoryDescription NVARCHAR(512) YES NO The description text of the task category. 1.2.5

P TaskCategoryId SMALLINT YES NO Task Category (Primary Key) Identifier. 1.2.5

This table is defined with the following values

TaskCategoryId TaskCategoryDescription
1 Classifier auditing

2 Outlook auditing

3 Word auditing

4 Excel auditing

5 PowerPoint auditing

6 Reclassification tool auditing

7 Recipient clearance check

8 High-water mark check

9 Originator clearance check

10 Label downgrade check

11 Label validity check

12 Label change check

13 Label upgrade check

[Link] 72
 Classifier Reporting Database Schema UM643402

14 Warning failure override

15 Label auto-upgrade

16 Classifier initialised

17 Project auditing

18 Visio auditing

19 OWA auditing

20 Rule

21 Policy

22 User clearance

23 Domain clearance

24 User defined messages

25 Selector library

26 Marking format library

27 Settings

28 Auditor

29 Classifier clearance extension

30 Default label check

31 User warning check

32 Marking library

[Link] 73
 Classifier Reporting Database Schema UM643402

33 Global settings

34 User message library

35 Configuration settings

36 Policy selector

37 Policy rule

38 SMTP domain clearance

39 Configuration transfer

40 Message content check

41 Content library

42 SharePoint Classifier auditing

43 User interface definitions

44 Maximum subject length check

45 Minimum subject length check

46 Recipient type check

47 Recipient count check

48 Message size check

49 Notes auditing

50 SMIME rule

51 RMS rule

[Link] 74
 Classifier Reporting Database Schema UM643402

52 Author label change check

53 Document author property

54 Reply to all check

55 Mandatory selector check

56 Document content check

57 Exchange Classifier auditing

58 File Classifier Auditing

59 Recipients on Response Check

60 Label Expiration Check

61 Exchange Classifier Administration Auditing

62 Mobile Classifier Auditing

63 McAfee HDLP Check

64 CAD Classifier Auditing

65 Condition Library

66 Unlabelled Attachment Check

67 Suggested Classification

[Link] 75
 Classifier Reporting Database Schema UM643402

3.3 Default Schema (dbo)

3.3.1 Settings

Database Version: 1.2 onwards

Key Name Data Type Mandatory Description Version
(Size)
SettingDataType NVARCHAR(50) NO The data type of the setting value i.e. how it should be interpreted. 1.2.5

SettingDetail NVARCHAR(50) NO Description of setting value 1.2.5

SettingId INT YES Unique row identifier of a table record 1.2.5

SettingValue NVARCHAR(50) NO The setting value 1.2.5

This table is defined with the following values

SettingId SettingValue SettingDataType SettingDetail Version
1 6 INT Period for deletion routine in months 1.2.5

2 1.25 float Database version number 1.2.5

3 0 float Indices created 1.2.5

[Link] 76
 Classifier Reporting Database Schema UM643402

4 DATABASE INDICIES
4.1 ClassifierStaging

Index Name Table (Field) Type Version

PK_ApplicationNameId [Link] Clustered 1.2.5

IX_APPNAME_1 [Link] [ProviderName] Non- 1.2.5

Clustered
Non-Unique
PK_StagedAttachmentId [Link] Clustered 1.2.5

PK_StagedAttachmentSelectorValueId [Link] Clustered 1.2.5

PK_ComputerId [Link] Clustered 1.2.5

PK_StagedDocumentEventId [Link] Clustered 1.2.5

PK_StagedDocumentEventSelectorValueId [Link] Clustered 1.2.5

PK_StagedEmailEventId [Link] Clustered 1.2.5

PK_StagedEmailEventSelectorValueId [Link] Clustered 1.2.5

PK_UserGUID [Link] Clustered 1.2.5

PK_ManagementId [Link] Clustered 1.2.5

PK_StagedRecipientId [Link] Clustered 1.2.5

[Link] 77
 Classifier Reporting Database Schema UM643402

4.2 ClassifierWorking
Index Name Table (Field) Type Version
PK_AttachmentId [Link] Clustered 1.2.5

IX_ATT_1 [ClassifierWorking].[Attachments]([AttachmentEmailEventId]) Non-Clustered 1.3.0

Non-Unique
IX_ATT_2 [ClassifierWorking].[Attachments]( [AttachmentNumber] ,[AttachmentEmailEventId]) Non-Clustered 1.3.0
Non-Unique
AttachmentsNumberIx [Link] [AttachmentNumber] Non-Clustered 1.2.578

PK_AttachmentSelectorValuesId [Link] Clustered 1.2.5

IX_ASV_1 [ClassifierWorking].[AttachmentSelectorValues]([AttachmentId]) Non-Clustered

Non-Unique
PK_AttachmentToSelectorId [Link] Clustered 1.2.5

IX_ATSV_1 [ClassifierWorking].[AttachmentToSelectorValues]([AttachmentId]) Non-Clustered 1.3.0

Non-Unique
IX_ATSV_2 [ClassifierWorking].[AttachmentToSelectorValues]([SelectorValueId]) Non-Clustered 1.3.0
Non-Unique
PK_ComputerId [Link] Clustered 1.2.5

IX_COMP_1 [ClassifierWorking].[computers]([ComputerId]) include ([DNSName]) Non-Clustered 1.3.0

Non-Unique
PK_DocumentEventId [Link] Clustered 1.2.5

DocSysEvIxDoc [Link] [SystemEventId] include (DocumentEventId) Non-Clustered 1.2.5

Non-Unique
IX_DE_1 [Link] [SystemEventId] Non-Clustered 1.2.5
Non-Unique
IX_DE_2 [ClassifierWorking].[DocumentEvents] ([SystemEventId] ASC,DocumentEventId) Non-Clustered 1.3.0
Non-Unique
PK_EmailAddressId [Link] Clustered 1.2.5

AttachmentsNumberIx removed in V1.2.5

[Link] 78
 Classifier Reporting Database Schema UM643402

PK_EmailEventId [Link] Clustered 1.2.5

IX_EE_1 [ClassifierWorking].[EmailEvents]([SystemEventId],[EmailEventId]) include Non-Clustered 1.3.0

([EmailSubject]) Non-Unique
IX_EE_2 [ClassifierWorking].[EmailEvents]([EmailFromId]) Non-Clustered 1.3.0
Non-Unique
SysEvIx [Link] [SystemEventsId] Non-Clustered 1.2.5
Non-Unique
PK_EventCheckDetailId [Link] Clustered 1.2.5

IX_ECD_1 [Link](Advisory) Non-Clustered 1.2.5

Non-Unique
IX_ECD_2 [Link](SystemEventId) Non-Clustered 1.2.5
Non-Unique
IX_ECD_3 [ClassifierWorking].[EventCheckDetails] ([SystemEventId]) Non-Clustered 1.3.0
Non-Unique
IX_ECD_4 [ClassifierWorking].[EventCheckDetails] Non-Clustered 1.3.0
([Advisory],[SystemEventId],[EventCheckDetailId]) Non-Unique

PK_EventId [Link] Clustered 1.2.5

IX_GENDESC_1 [Link] [EventType] Non-Clustered 1.2.5

Non-Unique
PK_EventGeneralDetailId [Link] Clustered 1.2.5

IX_EGD_1 [Link] [SystemEventId] Non-Clustered 1.2.5

include([LabelConfiguration],[LabelConfigurationLocation],[LabelConfigurationPolicy])
Non-Unique
PK_EventLevelId [Link] Clustered 1.2.5
PK_EventSelectorId [Link] Clustered 1.2.5

IX_ESV_1 [Link] [NumberofValues] include Non-Clustered 1.2.5

([SystemEventId],[SelectorValue1Id],[SelectorValue2Id],[SelectorValue3Id]) Non-Unique

IX_ESV_2 [Link] [NumberofValues] Non-Clustered 1.2.5

([SelectorValue3Id,SelectorValue2Id,SelectorValue1Id,NumberOfValues, Non-Unique
SystemEventId)

[Link] 79
 Classifier Reporting Database Schema UM643402

PK_EventToSelectorId [Link] Clustered 1.2.5

IX_ETSV_1 [ClassifierWorking].[EventToSelectorValues]([SelectorValueId]) Non-Clustered 1.3.0

PK_IssueTypeEntryId [Link] Clustered 1.2.5

PK_KnownUserId [Link] Clustered 1.2.5

IX_KU_1 [ClassifierWorking].[KnownUsers] ([UserSID],[DisplayName]) Non-Clustered 1.3.0

Non-Unique
IX_KU_2 [ClassifierWorking].[KnownUsers] ([UserSID],[DisplayName],[Department]) Non-Clustered 1.3.0
Non-Unique
PK_ManagementId [Link] Clustered 1.2.5

IX_MA_1 [Link] [SystemEventId],[IssueType] Non-Clustered 1.2,

Non-Unique
PK_RecipientId [Link] Clustered 1.2.5

IX_RECIP_1 [ClassifierWorking].[Recipients]([EmailAddressId]) Non-Clustered 1.3.0

Non-Unique
IX_RECIP_2 [ClassifierWorking].[Recipients]([RecipientEmailEventId]) Non-Clustered 1.3.0
Non-Unique
IX_RECIP_3 [ClassifierWorking].[Recipients]([RecipientEmailEventId],[RecipientId],[EmailAddressI Non-Clustered 1.3.0
d]) Non-Unique

PK_RecipientTypeId [Link] Clustered 1.2.5

IX_RECIPTYPE_1 [Link](RecipientTypeDescription) Non-Clustered 1.2.5

Non-Unique
PK_SelectorValueId [Link] Clustered 1.2.5

PK_SystemEventId [Link] Clustered 1.2.5

OrigIx [Link] [OriginRowIx] Non-Clustered 1.2.5

Non-Unique
idxEventID+TimeCreated [Link] [EventId] [TimeCreated] include Non-Clustered 1.2.5
([Classification],[SystemEventID],[Application],[UserName]) Non-Unique

[Link] 80
 Classifier Reporting Database Schema UM643402

IX_SE_1 [Link] [TimeCreated] Non-Clustered 1.2.5

Non-Unique
IX_SE_2 [Link] [EventId],[TimeCreated] include Non-Clustered 1.2.579
([SystemEventId],[Computer],[UserName],[Application]) Non-Unique

IX_SE_3 [ClassifierWorking].[SystemEvents] Non-Clustered 1.3.0

([UserSID],[SystemEventId],[EventId],[TimeCreated]) Non-Unique

SysEventIx1 [ClassifierWorking].[SystemEvents]([EventId]) include Non-Clustered 1.3.0

([SystemEventId],[Computer],[TimeCreated],[UserName]) Non-Unique

PK_TaskCategoryId [Link] Clustered 1.2.5

79 Removed in V1.3.0
[Link] 81
 Classifier Reporting Database Schema UM643402

5 VIEWS DATA DICTIONARY

5.1 ClassifierReporting
5.1.1 ClassificationChanges

Name Data Type (Size) Description Version

Advisory NVARCHAR(32) The advice offered to the User during the Check Event. 1.2.5

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

TimeCreated DATETIME280 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

80 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 82
 Classifier Reporting Database Schema UM643402

5.1.2 ClassificationSummary

Name Data Type (Size) Description Version

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

TimeCreated DATETIME281 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

81 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 83
 Classifier Reporting Database Schema UM643402

5.1.3 ClassificationIssues

Name Data Type (Size) Description Version

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

Computer NVARCHAR(2048) The name of the Computer that the User started an application running Classifier. 1.2.5

EventGeneralDescription NVARCHAR(1024) Description of the Check Event. 1.2.5

TimeCreated DATETIME282 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

82 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 84
 Classifier Reporting Database Schema UM643402

5.1.4 DocumentClassificationTrends

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification on the Document being saved. 1.2.5

TimeCreated DATETIME283 The Time the Document Save Event was created. 1.2.6

83 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 85
 Classifier Reporting Database Schema UM643402

5.1.5 EmailClassificationTrends

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification on the Email being sent. 1.2.5

TimeCreated DATETIME284 The Time the Email Send Event was created. 1.2.6

84 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 86
 Classifier Reporting Database Schema UM643402

5.1.6 MAIssues

Name Data Type (Size) Description Version

Computer NVARCHAR(2048) The name of the Computer that the User started an application running Classifier. 1.2.5

IssueType NVARCHAR(256) Description of the Management Agent Issue contained in the Event. 1.2.5

OfficeProductName NVARCHAR(256) Name of the Application running Classifier. 1.2.5

TimeCreated DATETIME285 The Time the Event was created. 1.2.6

UserNameRunningApplication NVARCHAR(2048) Computed user name – (domain\\user format) of the user running the Office Product identified in 1.2.5
the event.

85 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 87
 Classifier Reporting Database Schema UM643402

5.1.7 OverviewAllChecks

Name Data Type (Size) Description Version

Advisory NVARCHAR(32) The advice offered to the User during the Check Event. 1.2.5

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

EventGeneralDescription NVARCHAR(1024) Description of the Check Event. 1.2.5

TimeCreated DATETIME286 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

86 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 88
 Classifier Reporting Database Schema UM643402

5.1.8 OverviewClassifications

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

EventID INT The EventId of the Event in the EventGeneralDescription table. 1.2.5

TimeCreated DATETIME287 The Time the Event was created. 1.2.6

87 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 89
 Classifier Reporting Database Schema UM643402

5.1.9 PolicyCheckBreakDown

Name Data Type (Size) Description Version

Advisory NVARCHAR(32) The advice offered to the User during the Check Event. 1.2.5

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

EventGeneralDescription NVARCHAR(1024) Description of the Check Event. 1.2.5

TimeCreated DATETIME288 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

88 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 90
 Classifier Reporting Database Schema UM643402

5.1.10 PolicyChecksWithAdvisories

Name Data Type (Size) Description Version

Advisory NVARCHAR(32) The advice offered to the User during the Check Event. 1.2.5

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

EventGeneralDescription NVARCHAR(1024) Description of the Check Event. 1.2.5

TimeCreated DATETIME289 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

89 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 91
 Classifier Reporting Database Schema UM643402

5.1.11 PolicyDistribution

Name Data Type (Size) Description Version

Computer NVARCHAR(2048) The name of the Computer that the User started an application running Classifier. 1.2.5

LabelConfiguration NVARCHAR(128) The name of Classifiers Configuration that the Users application is running. 1.2.5

LabelConfigurationLocation NVARCHAR(1024) The location where the User is loading the Classifier Configuration from. 1.2.5

LabelConfigurationPolicy NVARCHAR(128) The name of Classifiers Policy that the Users application is running. 1.2.5

TimeCreated DATETIME290 The Time the User started an application running Classifier. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

90 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 92
 Classifier Reporting Database Schema UM643402

5.1.12 PolicyWarningTrends

Name Data Type (Size) Description Version

Advisory NVARCHAR(32) The advice offered to the User during the Check Event. 1.2.5

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

EventGeneralDescription NVARCHAR(1024) Description of the Check Event. 1.2.5

EventId INT The EventId of the Event in the EventGeneralDescription table. 1.2.5

TimeCreated DATETIME291 The Time the Event was created. 1.2.6

91 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 93
 Classifier Reporting Database Schema UM643402

5.1.13 ReportAttTypesbyClassification

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

Extension NVARCHAR(260) The Attachment document extension type. 1.2.5

TimeCreated DATETIME292 The Time the Event was created. 1.2.6

92 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 94
 Classifier Reporting Database Schema UM643402

5.1.14 ReportTotalDocumentsByClassificationUser

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

SystemEventId INT The SystemEventId of the Event in the SystemEvent table. 1.2.5

TimeCreated DATETIME293 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

93 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 95
 Classifier Reporting Database Schema UM643402

5.1.15 ReportTotalEmailsbyClassificationDomain

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

Domain NVARCHAR(510) The Recipients Domain. 1.2.5

SystemEventId INT The SystemEventId of the Event in the SystemEvent 1.2.5

table.

TimeCreated DATETIME294 The Time the Event was created. 1.2.6

94 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 96
 Classifier Reporting Database Schema UM643402

5.1.16 ReportTotalEmailsbyClassificationUser

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

SystemEventId INT The SystemEventId of the Event in the SystemEvent table. 1.2.5

TimeCreated DATETIME295 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

95 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 97
 Classifier Reporting Database Schema UM643402

5.2 ClassifierReporting2
5.2.1 ClassificationChanges

Name Data Type (Size) Description Version

Advisory NVARCHAR(32) The advice offered to the User during the Check Event. 1.2.5

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

n1 NVARCHAR(128) First (from the left) selector value parsed from the 1.2.5
Classification.

n2 NVARCHAR(128) Second selector value parsed from the Classification. 1.2.5

n3 NVARCHAR(128) Third selector value parsed from the Classification. 1.2.5

TimeCreated DATETIME296 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

96 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 98
 Classifier Reporting Database Schema UM643402

5.2.2 ClassificationSummary

Name Data Type (Size) Description Version

Application NVARCHAR(128) The Users Application that generated the Event. 1.2.5

n1 NVARCHAR(128) First (from the left) selector value parsed from the 1.2.5
Classification.

n2 NVARCHAR(128) Second selector value parsed from the Classification. 1.2.5

n3 NVARCHAR(128) Third selector value parsed from the Classification. 1.2.5

TimeCreated DATETIME297 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

97 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 99
 Classifier Reporting Database Schema UM643402

5.2.3 DocumentClassificationTrends

Name Data Type (Size) Description Version

n1 NVARCHAR(128) First (from the left) selector value parsed from the 1.2.5
Classification.

n2 NVARCHAR(128) Second selector value parsed from the Classification. 1.2.5

n3 NVARCHAR(128) Third selector value parsed from the Classification. 1.2.5

TimeCreated DATETIME298 The Time the Event was created. 1.2.6

98 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 100
 Classifier Reporting Database Schema UM643402

5.2.4 EmailClassificationTrends

Name Data Type (Size) Description Version

n1 NVARCHAR(128) First (from the left) selector value parsed from the 1.2.5
Classification.

n2 NVARCHAR(128) Second selector value parsed from the Classification. 1.2.5

n3 NVARCHAR(128) Third selector value parsed from the Classification. 1.2.5

TimeCreated DATETIME299 The Time the Email Send Event was created. 1.2.6

99 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 101
 Classifier Reporting Database Schema UM643402

5.2.5 FormattedClassifications

Name Data Type (Size) Description Version

n1 NVARCHAR(128) First (from the left) selector value parsed from the Classification. 1.2.5

n2 NVARCHAR(128) Second selector value parsed from the Classification. 1.2.5

n3 NVARCHAR(128) Third selector value parsed from the Classification. 1.2.5

SystemEventId INT The SystemEventId of the Event in the SystemEvent table who’s 1.2.5
Classification has been parsed.

[Link] 102
 Classifier Reporting Database Schema UM643402

5.2.6 OverviewClassifications

Name Data Type (Size) Description Version

EventId INT The EventId of the Event in the EventGeneralDescription table. 1.2.5

n1 NVARCHAR(128) First (from the left) selector value parsed from the Classification. 1.2.5

n2 NVARCHAR(128) Second selector value parsed from the Classification. 1.2.5

n3 NVARCHAR(128) Third selector value parsed from the Classification. 1.2.5

TimeCreated DATETIME2100 The Time the Event was created. 1.2.6

100 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 103
 Classifier Reporting Database Schema UM643402

5.2.7 ReportDocumentLabelChanges

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The new Classification in the Event 1.2.5

DocumentFilename NVARCHAR(2048) The Filename in the Event. 1.2.5

EventId INT The EventId of the Event in the EventGeneralDescription table. 1.2.5

OriginalLabel NVARCHAR(2048) The original Classification of the Document. 1.2.5

SystemEventId INT The SystemEventId of the Event in the SystemEvent table. 1.2.5

TimeCreated DATETIME2101 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

101 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 104
 Classifier Reporting Database Schema UM643402

5.2.8 ReportEmailLabelChanges

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The new Classification in the Event. 1.2.5

EmailSubject NVARCHAR(512) The Subject of the Email message. 1.2.5

EventId INT The EventId of the Event in the EventGeneralDescription table. 1.2.5

OriginalLabel NVARCHAR(2048) The original Classification of the Email message. 1.2.5

SystemEventId INT The SystemEventId of the Event in the SystemEvent table. 1.2.5

TimeCreated DATETIME2102 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

102 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 105
 Classifier Reporting Database Schema UM643402

5.2.9 ReportUserByClassificationByFilenameByTime

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

DocumentFilename NVARCHAR(2048) The Filename in the Event. 1.2.5

SystemEventId INT The SystemEventId of the Event in the SystemEvent table whose Classification has been parsed. 1.2.5

TimeCreated DATETIME2103 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

103 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 106
 Classifier Reporting Database Schema UM643402

5.2.10 SharePoint

Name Data Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

Computer NVARCHAR(2048) The name of the Computer that the User started an application running Classifier. 1.2.5

DocumentFilename NVARCHAR(2048) The Filename in the Event. 1.2.5

EventId INT The EventId of the Event in the EventGeneralDescription table. 1.2.5

n1 NVARCHAR(128) First (from the left) selector value parsed from the Classification. 1.2.5

n2 NVARCHAR(128) Second selector value parsed from the Classification. 1.2.5

n3 NVARCHAR(128) Third selector value parsed from the Classification. 1.2.5

TimeCreated DATETIME2104 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

104 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 107
 Classifier Reporting Database Schema UM643402

5.2.11 UnusalClassifications

Name Date Type (Size) Description Version

Classification NVARCHAR(2048) The Classification in the Event. 1.2.5

Computer NVARCHAR(2048) The name of the Computer that the User started an application running Classifier. 1.2.5

EventGeneralDescription NVARCHAR(1024) Description of the Event. 1.2.5

EventId INT The EventId of the Event in the EventGeneralDescription table. 1.2.5

TimeCreated DATETIME2105 The Time the Event was created. 1.2.6

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.2.5

105 Type changed from DATETIME to DATETIME2 in V1.2.6

[Link] 108
 Classifier Reporting Database Schema UM643402

5.3 ClassifierReporting3
5.3.1 Computers

Name Data Type (Size) Description Version

ComputerName NVARCHAR(64) Pre Windows 2000 Computer Name. 1.3

DNSName NVARCHAR(2048) DNS host name of the computer. 1.3

OperatingSystemName NVARCHAR(512) Operating System Name. 1.3

OperatingSystemVersion NVARCHAR(512) Operating System Version. 1.3

OperatingSystemServicePack NVARCHAR(512) Operating System Service Pack 1.3

5.3.2 Departments

Name Data Type (Size) Description Version

Department NVARCHAR(64) Name of the departments and the SQL wild card % 1.3

5.3.3 DocumentClassifierActivity

Name Data Type (Size) Description Version

ClassifierDocId NVARCHAR(512) The Classifier document id of the document. 1.3

[Link] 109
 Classifier Reporting Database Schema UM643402

Title NVARCHAR(2018) The short name of the document. 1.3

Description NVARCHAR(1057) Combination of the Event's description and status. 1.3

TimeCreated DATETIME2 Creation time of the classifier event. 1.3

UserName NVARCHAR(2018) Computed User name - in domain\\user format. 1.3

5.3.4 DocumentLabelDowngrade

Name Data Type (Size) Description Version

TimeCreated DATETIME2 The Time the Event was created. 1.3

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.3

5.3.5 Reasons

Name Data Type (Size) Description Version

ReasonOrder Bigint Alphabetic order of the reason. 1.3

Reason NVARCHAR(1024) The reason, or challenge text, that the user provided for the 1.3
override.

5.3.6 SelectorValueNames

Name Data Type (Size) Description Version

Name NVARCHAR(128) Name of the selector value 1.3

[Link] 110
 Classifier Reporting Database Schema UM643402

5.3.7 SelectorValueNamesAndWC

Name Data Type (Size) Description Version

Name NVARCHAR(128) Name of the selector value 1.3

5.3.8 UserClassifierActivity

Name Data Type (Size) Description Version

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.3

Description NVARCHAR(1057) Combination of the Event's description and status. 1.3

TimeCreated DATETIME2 Creation time of the classifier event. 1.3

Title NVARCHAR(2048) Document title or email subject. 1.3

5.3.9 UserResponseActivity

Name Data Type (Size) Description Version

UserName NVARCHAR(2048) Computed User name - in domain\\user format. 1.3

Reason NVARCHAR(1024) The reason, or challenge text, that the user provided for the 1.3
override.

TimeCreated DATETIME2 Creation time of the classifier event. 1.3

Title NVARCHAR(048) Document title or email subject. 1.3

1.3

[Link] 111
 Classifier Reporting Database Schema UM643402

6 TABLE TYPES
6.1 ClassifierStaging
6.1.1 AttachmentsTableType2

Name Date Type (Size) Mandatory Description Version

AttachmentName NVARCHAR(260) NO The title of the attachment. 1.2.5

Classification NVARCHAR(2048) NO The Classification of the attached document. 1.2.5

ClassifierDocId NVARCHAR(128) NO The ClassifierDocId of the attachment. 1.2.5

Extension NVARCHAR(260) NO The filename extension of the attached document. 1.2.5

AttachmentDocumentIndex NVARCHAR(250) NO Attachment Document index of the attachment. 1.2.5

AttachmentSISL NVARCHAR(160) NO XML encoding of the Classification. 1.2.5

AttachmentTextLabel NVARCHAR(260) NO Text encoding of the Classification. 1.2.5

AttachmentStatusDescription NVARCHAR(32) NO Description of the status of the attachment in HWM106 checks. Must be 1.2.5
one of FAILED, SUCCEEDED, INACCESSIBLE.

AttachmentNumber SMALLINT YES Unique number of the attachment for each event. 1.2.5

106 High Water Mark Check

[Link] 112
 Classifier Reporting Database Schema UM643402

6.1.2 RecipientTableType

Name Date Type (Size) Mandatory Description Version

SMTPAddress NVARCHAR(1142) NO Full hostname@domain SMTP address. 1.2.5

SMTPDomain NVARCHAR(510) NO SMTP domain part of the SMTP address. 1.2.5

DisplayName NVARCHAR(500) NO UNUSED. 1.2.5

RecipientType NVARCHAR(50) NO Type of recipient (TO, CC or BCC). 1.2.5

ExhcnageAddress NVARCHAR(2048) NO Exchange email address. 1.2.5

RecipientStatusDescription NVARCHAR(32) NO Description of the status of the recipient in clearance checks. Should be one of FAILED, 1.2.5
SUCCEEDED, And INDETERMINATE.

[Link] 113
 Classifier Reporting Database Schema UM643402

6.1.3 SelectorValueTableType

Name Date Type (Size) Mandatory Description Version

XmlId NVARCHAR(256) YES Parsed selector value id. 1.2.5

Value NVARCHAR(256) NO Parsed selector value. 1.2.5

SelectorValueOrder SMALLINT YES Position of parsed selector value. 1.2.5

AttachmentNumber SMALLINT NO If the parsed value is from an attachment, the attachment number. NULL 1.2.5
otherwise.

[Link] 114
 Classifier Reporting Database Schema UM643402

7 USERS, LOGINS AND ROLES

Name Type Description Version
ClassifierAdminUser User Database User associated with the ClassifierAdmin login. Owner of the Database and login that runs the SQL 1.2.5
jobs.
ClassifierAdmin Login Login with db_owner role for the ClassifierEventsDB. 1.2.5
ClassifierConsumerRole Role Role to use the Views to create Dashboards and Reports. Needed by Users of the Classifier Reporting Console. 1.2.5
ClassifierSupplierRole Role Role to use the Stored Procedures to write Event Data into the Staging Tables. Used by the Event Log and AD 1.2.5
services.
ClassifierMaintenanceRole Role Role to set permissions needed to access temporary tables and Staging to Working stored procedures. Needed 1.3.0
by the ClassifierAdmin (User).

[Link] 115
 Classifier Reporting Database Schema UM643402

8 STORED PROCEDURES AND SQL JOBS

8.1 Classifier Staging Stored Procedures
These stored procedures are designed to be run by the Classifier Reporting Event Log and AD
Services.

8.1.1 usp_StagingComputersInsert

Item Description
Description Stored Procedure to write Computer details from an Active Directory to the S

Used By AD Service

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters ComputerName nvarchar(64)
DNSName nvarchar(2048)
DCType nvarchar(512)
Site nvarchar(2048)
Description nvarchar(1024)
Company nvarchar(512)
OperatingSystemName nvarchar(512)
OperatingSystemVersion nvarchar(512)
OperatingSystemServicePack nvarchar(512)
isDeleted varchar(5)
ComputerGUID varchar(56)
Attribute1 nvarchar(2048) = NULL,
Attribute2 nvarchar(2048) = NULL,
Attribute3 nvarchar(2048) = NULL,
Attribute4 nvarchar(2048) = NULL,
Attribute5 nvarchar(2048) = NULL,
Attribute6 nvarchar(2048) = NULL,
Attribute7 nvarchar(2048) = NULL,
Attribute8 nvarchar(2048) = NULL,
Attribute9 nvarchar(2048) = NULL,
Attribute10 nvarchar(2048) = NULL
Returns INTEGER
Tables Updated [Link]
Version V1.2.5

8.1.2 usp_StagingComputersUpdateDelete

Item Description
Description Stored Procedure to mark Staging Tables Computer entries as being delete
deleted in the Active Directory.
Used By AD Service

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters ComputerGUID varchar(56)

[Link] 116
 Classifier Reporting Database Schema UM643402

Output INTEGER
Tables Updated [Link]
Version V1.2.5

8.1.3 usp_StagingDocumentEventsInsert

Item Description
Description Stored Procedure called by the Event Log Service to write Document Events

Used By AD Service

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters Computer nvarchar(2048),
TimeCreated datetime2,
TaskCategoryId smallint,
UserId nvarchar(128),
UserName nvarchar(2048)= N'USER UNKNOWN',
ProviderName nvarchar(128),
Opcode int,
EventLevelId tinyint,
Keywords nvarchar(2048) = NULL,
ProcessId int,
ThreadId int,
Classification nvarchar(2048) = NULL,
SuggestedClassification nvarchar(2048) = NULL,
FailedSuggestions nvarchar(2048) = NULL,
EventId int,
Title nvarchar(2048) = NULL,
DocumentFilename nvarchar(2048) = NULL,
Extension nvarchar(260) = NULL,
ClassifierDocId nvarchar(256) = NULL,
UserSaverId nvarchar(256) = NULL,
DocumentSaverId nvarchar(256) = NULL,
SelectorValuesTVP as [ClassifierStaging].[SelectorValueTableType] readon
LabelConfiguration nvarchar(128) = NULL,
LabelConfigurationLocation nvarchar(512) = NULL,
LabelConfigurationLocationPath nvarchar(512) = NULL,
LabelConfigurationPolicy nvarchar(128) = NULL,
ClassifierLicenceError nvarchar(128) = NULL,
ContentGroupsChecked nvarchar(512) = NULL,
Advisory nvarchar(32) = NULL,
Reason nvarchar(512) = NULL,
UserAction nvarchar(32) = NULL,
OriginalLabel nvarchar(2048) = NULL
Output INTEGER
Tables Updated [Link]
[Link]
Version V1.2.5

[Link] 117
 Classifier Reporting Database Schema UM643402

8.1.4 usp_StagingEmailEventsInsert

Item Description
Description Stored Procedure called by the Event Log Service to write Email Events to th

Used By AD Service

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters Computer nvarchar(2048),
TimeCreated datetime2,
TaskCategoryId smallint,
UserId nvarchar(128),
UserName nvarchar(2048)= N'USER UNKNOWN',
ProviderName nvarchar(128),
Opcode int,
EventLevelId tinyint,
Keywords nvarchar(2048) = NULL,
ProcessId int,
ThreadId int,
Classification nvarchar(2048) = NULL,
SuggestedClassification nvarchar(2048) = NULL,
FailedSuggestions nvarchar(2048) = NULL,
EventId int,
EmailFrom nvarchar(2048),
EmailDomain nvarchar(500),
ExchangeAddress nvarchar(2048),
SearchKey nvarchar(512),
EmailSubject nvarchar(512) = NULL,
RecipientsTVP as [ClassifierStaging].[RecipientsTableType] readonly,
AttachmentsTVP as [ClassifierStaging].[AttachmentsTableType2] readonly,
SelectorValuesTVP as [ClassifierStaging].[SelectorValueTableType] readon
LabelConfiguration nvarchar(128) = NULL,
LabelConfigurationLocation nvarchar(512) = NULL,
LabelConfigurationLocationPath nvarchar(512) = NULL,
LabelConfigurationPolicy nvarchar(128) = NULL,
ClassifierLicenceError nvarchar(128) = NULL,
SizeOfItem varchar(32) = NULL,
Advisory nvarchar(32) = NULL,
Reason nvarchar(512) = NULL,
UserAction nvarchar(32) = NULL,
OriginalLabel nvarchar(2048) = NULL
Output INTEGER
Tables Updated [Link]
[Link]
[Link]
[Link]
[Link]
Version V1.2.5

8.1.5 usp_StagingKnownUsersInsert

Item Description

[Link] 118
 Classifier Reporting Database Schema UM643402

Description Stored Procedure to write User details from an Active Directory to the Stagin

Used By AD Service

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters UserGUID nvarchar(56),
UserSID varchar(184),
isDeleted varchar(5),
Firstname nvarchar(64),
Lastname nvarchar(64),
Displayname nvarchar(64),
Description nvarchar(1024),
Office nvarchar(128),
City nvarchar(1024),
State nvarchar(128),
Country nvarchar(3),
UserPrincipalName nvarchar(1024),
SamAccountName nvarchar(256),
JobTitle nvarchar(128),
Department nvarchar(64),
Company nvarchar(64),
Manager nvarchar(1024),
legacyExchangeName nvarchar(1024),
proxyAddresses nvarchar(2048),
mail nvarchar(1142),
Attribute1 nvarchar(2048),
Attribute2 nvarchar(2048),
Attribute3 nvarchar(2048),
Attribute4 nvarchar(2048),
Attribute5 nvarchar(2048),
Attribute6 nvarchar(2048),
Attribute7 nvarchar(2048),
Attribute8 nvarchar(2048),
Attribute9 nvarchar(2048),
Attribute10 nvarchar(2048)
Output INTEGER
Tables Updated [Link]
Version V1.2.5

8.1.6 usp_StagingKnownUsersUpdateDelete

Name Description
Item Stored Procedure to mark Staging Tables User entries as being deleted if th
Active Directory.
Used By AD Service

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters UserGUID varchar(56)
Output INTEGER
Tables Updated [Link]
Version V1.2.5

[Link] 119
 Classifier Reporting Database Schema UM643402

8.1.7 usp_StagingManagementEventsInsert

Item Description
Description Stored Procedure called by the Event Log Service to write Management Age
Tables.
Used By AD Service

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters Computer nvarchar(2048),
TimeCreated datetime2,
TaskCategoryId smallint,
UserId nvarchar(128),
UserName nvarchar(2048)= N'USER UNKNOWN',
ProviderName nvarchar(128),
Opcode int,
EventLevelId tinyint,
Keywords nvarchar(2048) = NULL,
ProcessId int,
ThreadId int,
EventId int,
OfficeProductId smallint,
OfficeVersion nvarchar(256),
WindowsVersion nvarchar(256),
IssueType smallint,
UserNameRunningApplication nvarchar(2048),
SIDRunningApplication nvarchar(128),
ConfigurationLocation nvarchar(512),
ConfigPublishedLocationType nvarchar(512),
ConfigPublishedLocation nvarchar(512),
ConfigRetrievalLocation nvarchar(512),
AdditionalInformation nvarchar(512)
Output INTEGER
Tables Updated [Link]
Version V1.2.5

8.2 ClassifierWorking stored procedures

These stored procedures are run by the identified SQL jobs and can also be run in the SQL Server
Management Studio.

8.2.1 usp_AttachmentSelectorValuesInsert

Item Description
Description Stored Procedure that writes Document Attachment selector identifier values
from the [Link] table to the
ClassifierWorking...AttachmentSelectorValues table that can be used to bui

Used By ClassifierEvents Import

[Link] 120
 Classifier Reporting Database Schema UM643402

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated [Link]
Version V1.2.5

8.2.2 usp_DeleteData

Item Description
Description Stored Procedure to delete data in the Staging tables older than a configura

Records in the [Link] and [Link]

Used By ClassifierEvents Delete

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated107 [Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
Version V1.2.5

8.2.3 usp_DocumentEventsWorkingInsert

Item Description
Description Stored Procedure to process Document event data from the Staging to Work

Used By ClassifierEvents Import

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated [Link]

107 107 Uses temporary tables.

[Link] 121
 Classifier Reporting Database Schema UM643402

[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
Version V1.2.5

8.2.4 usp_EmailEventsWorkingInsert

Item Description
Description Stored Procedure to process Email event data from the Staging to Working t

Used By ClassifierEvents Import

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated108 [Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
Version V1.2.5

8.2.5 usp_EventSelectorValueInsert

Item Description

108 Uses temporary tables.

[Link] 122
 Classifier Reporting Database Schema UM643402

Description Stored Procedure that writes selector identifier values (parsed from classifica
[Link] table to the [Link]
build Views for the Reporting Console.
Used By ClassifierEvents Import

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated [Link] 109
Version V1.2.5

8.2.6 usp_KnownComputersWorkingInsert

Item Description
Description Stored Procedure to write/update Computers details from the Staging to Wo

Used By AD Data Import

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated [Link]
[Link]
Version V1.2.5

8.2.7 usp_KnownUsersWorkingInsert

Item Description
Description Stored Procedure to write/update User details from the Staging to Working t

Used By AD Data Import

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated [Link]
[Link]
Version V1.2.5

109 109 Uses temporary tables.

[Link] 123
 Classifier Reporting Database Schema UM643402

8.2.8 usp_ManagementEventsWorkingInsert

Item Description
Description Stored Procedure to write Management Agent Events from the Staging Tabl

Used By ClassifierEvents Import

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated [Link]
[Link]
[Link]
Version V1.2.5

8.2.9 usp_ModifySelectorValues

Item Description
Description Stored Procedure called by the Event Log Service to write Label Selector co
Working Tables.
Used By ClassifierEvents Import

Execute Permissions Users Login mapped to ClassifierSupplierRole

Input Parameters xmlId nvarchar(256),
ControlName nvarchar(128),
Name nvarchar(128),
PortionMark nvarchar(128),
AlternativeName1 nvarchar(128),
AlternativeName2 nvarchar(128),
AlternativeName3 nvarchar(128)
Output INTEGER
Tables Updated [Link]
Version V1.2.5

8.2.10 usp_ReorganizeIndices

Item Description
Description Stored Procedure that rebuilds indexes on Classifier Working tables.

Used By Index creation and reorganizing

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None

[Link] 124
 Classifier Reporting Database Schema UM643402

Output INTEGER
Tables Updated Variable: Calculates which indexes to defragment
Version V1.2.5

8.2.11 usp_CreateIndices

Item Description
Description Stored Procedure that creates indexes on working tables
Used By Index creation and reorganizing

Execute Permissions Users Login mapped to ClassifierMaintenanceRole role.

Input Parameters None
Output INTEGER
Tables Updated110 [Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
Version V1.2.5111

8.3 ClassifierReport3 stored procedures

These stored procedures are all run by Classifier Reporting Console reports.

8.3.1 usp_ReportClassificationBreakdown

Item Description
Description Stored Procedure to create the 'Documents and Emails By Classifica

110 110 Uses temporary tables.

111 Updated in V1.3.0
[Link] 125
 Classifier Reporting Database Schema UM643402

Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters FromDate DATETIME2,
Department VARCHAR(64) = NULL
Output
Version V1.3.0

8.3.2 usp_ReportDocumentsDowngraded

Item Description
Description Stored Procedure to populate the 'Document Downgrade' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters FromDate DATETIME2
ToDate DATETIME2
Department VARCHAR(64) = NULL
Selector VARCHAR(64) = NULL
Output
Version V1.3.0

8.3.3 usp_ReportEmailDowngraded

Item Description
Description Stored Procedure to create the 'Email Downgrade' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters FromDate DATETIME2
ToDate DATETIME2
Department VARCHAR(64) = NULL
Selector VARCHAR(64) = NULL
Output
Version V1.3.0

8.3.4 usp_ReportEmailsByDomain

Item Description
Description Stored Procedure to create the 'Emails Sent by user and domain' rep
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

[Link] 126
 Classifier Reporting Database Schema UM643402

Input Parameters FromDate DATETIME2,

ToDate DATETIME2
Department VARCHAR(64) = NULL
Classification VARCHAR(64) = NULL
Output
Version V1.3.0

8.3.5 usp_ReportTotalEmailsSentByDomain

Item Description
Description Stored Procedure to create the 'Total emails sent by domain' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters FromDate DATETIME2
Department VARCHAR(64)
Classification VARCHAR(64)
Output
Version V1.3.0

8.3.6 usp_ReportSentUnclassifiedAttachments

Item Description
Description Stored Procedure to create the 'Emails sent with unclassified attachm
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters FromDate DATETIME2
Department VARCHAR(64) = NULL
Output
Version V1.3.0

8.4 ClassifierReport3 Table Value Functions

These table value functions are all by Classifier Reporting Console reports.

8.4.1 fnClassifierActivity

Item Description
Description Function used to create the 'Printed Documents' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

[Link] 127
 Classifier Reporting Database Schema UM643402

Input Parameters Days INTEGER,

Event INTEGER
Output Returns EventId, TimeCreated & Classification from ClassifierWorking.S
the input parameters

Version V1.3.0

8.4.2 fnClassifierActivityCount

Item Description
Description Function used to create the 'Printed Documents' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters Days INTEGER,
Event INTEGER
Output Returns count of records from [Link] that matche
Version V1.3.0

8.4.3 fnClassifierDowngradeActivity

Item Description
Description Function used to create the 'Downgraded Documents' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters Days INTEGER,
Event INTEGER
Response VARCHAR(64)
Output Returns EventId, TimeCreated, UserName, OriginalLabel, Classification, Ap
EventGeneralDescription, Advisory & Reason from [Link]
[Link] & [Link]
parameters
Version V1.3.0

8.4.4 fnClassifierDowngradeActivityCount

Item Description
Description Function used to create the 'Downgraded Documents' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

[Link] 128
 Classifier Reporting Database Schema UM643402

Input Parameters Days INTEGER,

Event INTEGER
Response VARCHAR(64)
Output Returns count of records from [Link], ClassifierW
[Link] that matches the input parameters tha
parameters.
Version V1.3.0

8.4.5 fnClassifierLabelActivity

Item Description
Description Function used to create the 'Document and email classifications' repo
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters Days INTEGER
Event INTEGER
NOCLASSIFICATION VARCHAR(2048)
Output Returns TimeCreated, Classification & EventID from [Link]
input parameters
Version V1.3.0

8.4.6 fnClassifierLabelActivityCount

Item Description
Description Function used to create the 'Document and email classifications' repo
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters Days INTEGER
Event INTEGER
NOCLASSIFICATION VARCHAR(2048)
Output Returns count of records from [Link] that matche
Version V1.3.0

8.4.7 fnClassifierLabelCounts

Item Description
Description Function used in the 'Classified versus no marking' report.
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters Days INTEGER
Event INTEGER

[Link] 129
 Classifier Reporting Database Schema UM643402

Output Returns
1 Text “Classified” & count of events from [Link]
and has a non-null classification
2 Text “No Marking” & count of events from [Link]
parameters and have no classification
Version V1.3.0

8.4.8 fnClassifierMachines

Item Description
Description Function that creates the 'Machines configured with Classifier over th
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters Days INTEGER
Output Returns
1 Text “Enabled” and count of Classifier enabled Computers from Classifier
that meet the input parameters.
2 Text “Not enables” and Count of Computers from [Link]
event has been recorded and meets the input parameters.
Version V1.3.0

8.4.9 fnClassifierUserActivity

Item Description
Description Function used to create the 'Total documents saved by classification
sent by classification and user' reports
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters Event INTEGER
StartTime DATETIME2
EndTime DATETIME2
UserName VARCHAR(2048)
Classification VARCHAR(2048)
Output Returns SystemEventId, TimeCreated, UserName, Classification & EventId
[Link] that matches the input parameters
Version V1.3.0

8.4.10 fnClassifierLabelActivityTopN

Item Description
Description Function used to create the 'Classifier activity over the last 7 and 30 d

[Link] 130
 Classifier Reporting Database Schema UM643402

Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters TopN INTEGER
Days INTEGER
Event INTEGER
NOCLASSIFICATION VARCHAR(2048)
Output Returns TimeCreated, Classification & EventID from [Link]
input parameters, for the TopN most numerous classifications.
Version V1.3.0

8.4.11 fnClassifierLabelActivityTopNCount

Item Description
Description Function used to create the 'Classifier activity over the last 7 and 30 d
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters TopN INTEGER
Days INTEGER
Event INTEGER
NOCLASSIFICATION VARCHAR(2048)
Output Returns count of records from [Link] that matche
TopN most numerous classifications.
Version V1.3.0

8.4.12 fnReasons

Item Description
Description Function returns a list of reasons provided by Users for ignoring warn
in the specified time period
Used By Classifier Reporting Console

Execute Permissions Users Login mapped to ClassifierConsumerRole role.

Input Parameters StartDate DateTime2
Event INTEGER
Output Reason Order (rank), User supplied reason
Version V1.3.0

8.5 Application Locks

[Link] 131
 Classifier Reporting Database Schema UM643402

Lock Used In Version

CriticalSectionComputers usp_StagingComputersInsert 1.2.5
usp_StagingComputersUpdateDelete
usp_KnownComputersWorkingInsert
CriticalSectionDoc usp_StagingDocumentEventsInsert 1.2.5
usp_CreateIndices
usp_DocumentEventWorkingInsert
usp_DeleteData
usp_ReorganizeIndices
CriticalSection usp_StagingEmailEventsInsert 1.2.5
usp_StagingKnownUsersInsert
usp_StagingKnownUsersUpdateDelete
usp_AttachmentSelectorValuesInsert
usp_CreateIndices
usp_EmailEventWorkingInsert
usp_EventSelectorValuesInsert
usp_KnownUsersWorkingInsert
usp_ReorganizeIndices
usp_DeleteData
CriticalSectionMA usp_StagingManagementEventsInsert 1.2.5
usp_CreateIndices
usp_ManagementEventsWorkingInsert
usp_ReorganizeIndices
usp_DeleteData

8.6 SQL Jobs

Name Description Frequency Version
AD Data Import Runs the import to working tables SPs. Every 10 1.2.5
minutes.
ClassifierEvents Delete data older than the value in Every 1 hour. 1.2.5
Delete112 [Link] table.

ClassifierEvents Runs the import to working tables SP. Every 10 1.2.5

Import113 minutes.
Index creation and Calls usp_CreateIndices to create indexes the Every 24 hours 1.2.5
reorganizing first time it is run and then calls
usp_ReorganiseIndices to rebuild fragmented
indices.

112 This SQL job is installed in a disabled state

113 Modified in V1.2.5 to no longer call usp_ReorganizeIndices.
[Link] 132