Intruder to ClickHouse Integration
AI-first ETL from Intruder into ClickHouse. Governed entities, incremental sync, typed landing tables.
How Datrise loads Intruder into ClickHouse
Datrise syncs Intruder's scans, issues, targets, severities, occurrences, and remediation statuses into ClickHouse as a MergeTree table per source entity. Flexible or custom fields land in JSON or Map columns, and timestamps such as created, updated, and status changes are typed as DateTime64.
Sync is incremental: Datrise uses inserts into a ReplacingMergeTree keyed on stable id, so the latest version wins on merge, so re-runs update only what changed. Partition by month and order by (entity id, updated-at) for fast range scans. ClickHouse deduplicates asynchronously on merge, so Datrise uses ReplacingMergeTree and FINAL-safe queries rather than assuming immediate upserts.
Ideal for high-volume event analytics that need sub-second aggregation.
Endpoints
Intruder: Continuous vulnerability scanning for internet assets.
ClickHouse: Columnar OLAP engine for fast aggregations.
How Intruder entities map to ClickHouse
| Intruder entity | ClickHouse object | Notes |
|---|---|---|
| scans | intruder_scans | id PK · custom fields → JSON or Map columns |
| issues | intruder_issues | id PK · linked to intruder_scans |
| targets | intruder_targets | id PK · linked to intruder_scans |
| severities | intruder_severities | id PK · linked to intruder_scans |
FAQ
How does Datrise handle Intruder's custom fields in ClickHouse?
Flexible values are stored as JSON or Map columns, so new fields don't require a migration; strongly-typed fields — dates, numbers, and references — are promoted to native ClickHouse types.
How does the Intruder to ClickHouse sync stay up to date?
It runs incrementally — Datrise uses inserts into a ReplacingMergeTree keyed on stable id, so the latest version wins on merge.
Related pipelines
More destinations for Intruder
Early access
Connect Intruder to ClickHouse the easy way
Skip brittle scripts and manual exports. Join the waitlist to get a guided setup, AI-assisted mapping, and reliable incremental sync for this integration.