CREATE TABLE rawlog_line  ( hostname    TEXT,
                            domain      TEXT,
                            ip          TEXT,
                            osystem     TEXT,
                            release     TEXT,
                            version     TEXT,
                            date        DATE,
                            time        TIME,
                            logline     TEXT,
                            signature   TEXT );

CREATE TABLE scslog_line  ( hostname    TEXT,
                            domain      TEXT,
                            ip          TEXT,
                            osystem     TEXT,
                            release     TEXT,
                            version     TEXT,
                            date        DATE,
                            time        TIME,
                            syscall     TEXT,
                            program     TEXT,
                            pid         INT     UNSIGNED  NOT NULL,
                            uid         INT     UNSIGNED  NOT NULL,
                            euid        INT     UNSIGNED  NOT NULL,
                            call        TEXT,
                            comment     TEXT );

CREATE TABLE firewall_line  ( action      TEXT,
                              if_in       TEXT,
                              if_out      TEXT,
                              mac         TEXT,
                              source      TEXT,
                              destination TEXT,
                              ip_length   TEXT,
                              tos         TEXT,
                              prec        TEXT,
                              ttl         TEXT,
                              id          TEXT,
                              protocol    TEXT,
                              src_port    TEXT,
                              dst_port    TEXT,
                              pac_length  TEXT,
                              date        DATE,
                              time        TIME );

CREATE TABLE laus_login     ( seqnr       INT   UNSIGNED  NOT NULL,
                              type        TEXT,
                              arch        TEXT,
                              pid         INT   UNSIGNED  NOT NULL,
                              size        INT   UNSIGNED  NOT NULL,
                              timestamp   DATE,
                              audit_id    INT             NOT NULL,
                              login_uid   INT             NOT NULL,
                              euid        INT             NOT NULL,
                              ruid        INT             NOT NULL,
                              suid        INT             NOT NULL,
                              fsuid       INT             NOT NULL,
                              egid        INT             NOT NULL,
                              rgid        INT             NOT NULL,
                              sgid        INT             NOT NULL,
                              fsgid       INT             NOT NULL,
                              evname      TEXT,
                              uid         INT             NOT NULL,
                              hostname    TEXT,
                              address     TEXT,
                              terminal    TEXT,
                              executeable TEXT );

CREATE TABLE laus_chlid     ( seqnr       INT   UNSIGNED  NOT NULL,
                              type        TEXT,
                              arch        TEXT,
                              pid         INT   UNSIGNED  NOT NULL,
                              size        INT   UNSIGNED  NOT NULL,
                              timestamp   DATE,
                              audit_id    INT             NOT NULL,
                              login_uid   INT             NOT NULL,
                              euid        INT             NOT NULL,
                              ruid        INT             NOT NULL,
                              suid        INT             NOT NULL,
                              fsuid       INT             NOT NULL,
                              egid        INT             NOT NULL,
                              rgid        INT             NOT NULL,
                              sgid        INT             NOT NULL,
                              fsgid       INT             NOT NULL,
                              evname      TEXT );

CREATE TABLE laus_scall     ( seqnr       INT   UNSIGNED  NOT NULL,
                              type        TEXT,
                              arch        TEXT,
                              pid         INT   UNSIGNED  NOT NULL,
                              size        INT   UNSIGNED  NOT NULL,
                              timestamp   DATE,
                              audit_id    INT             NOT NULL,
                              login_uid   INT             NOT NULL,
                              euid        INT             NOT NULL,
                              ruid        INT             NOT NULL,
                              suid        INT             NOT NULL,
                              fsuid       INT             NOT NULL,
                              egid        INT             NOT NULL,
                              rgid        INT             NOT NULL,
                              sgid        INT             NOT NULL,
                              fsgid       INT             NOT NULL,
                              evname      TEXT,
                              major       INT,
                              minor       INT,
                              name        TEXT,
                              result      INT,
                              resulttype  TEXT,
                              nargs       INT );

CREATE TABLE laus_exit      ( seqnr       INT   UNSIGNED  NOT NULL,
                              type        TEXT,
                              arch        TEXT,
                              pid         INT   UNSIGNED  NOT NULL,
                              size        INT   UNSIGNED  NOT NULL,
                              timestamp   DATE,
                              audit_id    INT             NOT NULL,
                              login_uid   INT             NOT NULL,
                              euid        INT             NOT NULL,
                              ruid        INT             NOT NULL,
                              suid        INT             NOT NULL,
                              fsuid       INT             NOT NULL,
                              egid        INT             NOT NULL,
                              rgid        INT             NOT NULL,
                              sgid        INT             NOT NULL,
                              fsgid       INT             NOT NULL,
                              evname      TEXT,
                              exit_code   INT );

CREATE TABLE laus_netlink   ( seqnr       INT   UNSIGNED  NOT NULL,
                              type        TEXT,
                              arch        TEXT,
                              pid         INT   UNSIGNED  NOT NULL,
                              size        INT   UNSIGNED  NOT NULL,
                              timestamp   DATE,
                              audit_id    INT             NOT NULL,
                              login_uid   INT             NOT NULL,
                              euid        INT             NOT NULL,
                              ruid        INT             NOT NULL,
                              suid        INT             NOT NULL,
                              fsuid       INT             NOT NULL,
                              egid        INT             NOT NULL,
                              rgid        INT             NOT NULL,
                              sgid        INT             NOT NULL,
                              fsgid       INT             NOT NULL,
                              evname      TEXT );

CREATE TABLE laus_text      ( seqnr       INT   UNSIGNED  NOT NULL,
                              type        TEXT,
                              arch        TEXT,
                              pid         INT   UNSIGNED  NOT NULL,
                              size        INT   UNSIGNED  NOT NULL,
                              timestamp   DATE,
                              audit_id    INT             NOT NULL,
                              login_uid   INT             NOT NULL,
                              euid        INT             NOT NULL,
                              ruid        INT             NOT NULL,
                              suid        INT             NOT NULL,
                              fsuid       INT             NOT NULL,
                              egid        INT             NOT NULL,
                              rgid        INT             NOT NULL,
                              sgid        INT             NOT NULL,
                              fsgid       INT             NOT NULL,
                              evname      TEXT,
                              text        TEXT );

                              