Skip to main content


This view provides detailed W5 information (such as process and machine details) about generated events (alerts).

When Lacework generates an event (alert), it returns a row in the Alert_DETAILS_V view with information about the event.

Each row contains file information as listed in the columns.

Column NameData TypeDescription
START_TIMETimestampThe time and date when the hourly aggregation time period starts.
END_TIMETimestampThe time and date when the hourly aggregation time period ends.
EVENT_TYPETextThe type/title of the alert.
EVENT_IDNumberThe unique identifier generated for this Event by Lacework.
EVENT_MODELTextThe data model used for generating the alert.
EVENT_ACTORTextThe event actor that categorizes the type of an alert such as application, process, files, etc.
ENTITY_MAPJSON ObjectThe entity map lists all the entities of the alert which are further classified in KEYS AND PROPS.

The ALERT_DETAILS_V view does not currently include agent alerts. This feature will be added in an upcoming platform release.