VERSION 2
SCHEMA >
    `workspaceId` String `json:$.workspaceId`,
    `bucket` String `json:$.bucket`,
    `auditLogId` String `json:$.auditLogId`,
    `event` String `json:$.event`,
    `time` Int64 `json:$.time`,
    `actorType` String `json:$.actor.type`,
    `actorId` String `json:$.actor.id`,
    `actorName` Nullable(String) `json:$.actor.name`,
    `actorMeta` Nullable(String) `json:$.actor.meta`,
    `description` String `json:$.description`,
    `resources` String `json:$.resources`,
    `userAgent` Nullable(String) `json:$.context.usageAgent`,
    `location` Nullable(String) `json:$.context.location`

ENGINE "MergeTree"
ENGINE_SORTING_KEY "workspaceId,bucket,time"