2024-04-03 16:13:04 +00:00
|
|
|
name: parse_json
|
2024-04-29 16:12:03 +00:00
|
|
|
notes: This table is not a core osquery table. It is included as part of Fleet's agent ([fleetd](https://fleetdm.com/docs/get-started/anatomy#fleetd)).
|
2024-04-03 16:13:04 +00:00
|
|
|
description: Parses an entire file as JSON. See `parse_jsonl` where multiple JSON documents are supported.
|
|
|
|
|
platforms:
|
|
|
|
|
- darwin
|
|
|
|
|
- windows
|
|
|
|
|
- linux
|
|
|
|
|
evented: false
|
|
|
|
|
columns:
|
|
|
|
|
- name: path
|
|
|
|
|
description: Path of the file to read.
|
|
|
|
|
required: true
|
|
|
|
|
type: text
|
|
|
|
|
- name: fullkey
|
|
|
|
|
description: Same as `key` in this table. See `parse_jsonl` where multiple JSON documents are supported.
|
|
|
|
|
required: false
|
|
|
|
|
type: text
|
|
|
|
|
- name: parent
|
|
|
|
|
description: Parent key when keys are nested in the document.
|
|
|
|
|
required: false
|
|
|
|
|
type: text
|
|
|
|
|
- name: key
|
|
|
|
|
description: JSON key or array index.
|
|
|
|
|
required: false
|
|
|
|
|
type: text
|
|
|
|
|
- name: value
|
|
|
|
|
description: JSON value
|
|
|
|
|
required: false
|
|
|
|
|
type: text
|
