OptionaldefaultDefault catalog used to resolve unqualified identifiers in query. If
unset, the rule's catalog_name is used.
OptionaldefaultDefault schema used to resolve unqualified identifiers in query. If
unset, the rule's schema_name is used.
OptionalquerySQL query evaluated as the rule input.
Batch SQL input for a detection rule.