SQL snippets
-- last 24h
select * from decisions
where created_at >= now() - interval '1 day'
order by created_at desc;
-- last week
select * from decisions
where created_at >= now() - interval '7 days'
order by created_at desc;
-- explicit window
select * from decisions
where created_at between '2025-01-01' and '2025-01-31'
order by created_at;
CSV export
psql "$DATABASE_URL" -c "\copy (
select * from decisions order by created_at
) to 'decisions.csv' csv header"
SIEM / ELK
Transfer the CSV via scp or attach Postgres logical replication into your SIEM ingestion pipeline. Prelude emits structured request logs (JSON) that can be forwarded via syslog/filebeat.