diff --git a/docs/queries.yml b/docs/queries.yml index b0e38e6a47..6e93ee7716 100644 --- a/docs/queries.yml +++ b/docs/queries.yml @@ -2275,7 +2275,7 @@ spec: name: Get Docker contained processes on a system platform: darwin, linux description: Docker containers Processes, can be used on normal systems or a kubenode. - query: SELECT c.id, c.name, c.image, c.image_id, c.command, c.created, c.state, c.status, p.cmdline FROM docker_containers c CROSS JOIN docker_container_processes p using(id); + query: SELECT c.id, c.name, c.image, c.image_id, c.command, c.created, c.state, c.status, p.cmdline FROM docker_containers c JOIN docker_container_processes p ON c.id = p.id; bash: echo "id,name,image,image_id,command,created,state,status,cmdline"; for id in $(docker ps -q); do cont=$(docker inspect --format='{{.Id}},{{.Name}},{{.Config.Image}},{{.Image}},{{.Path}} {{range .Args}}{{.}} {{end}},{{.Created}},{{.State.Status}},{{.State.ExitCode}}' "$id"); docker top "$id" aux | sed '1d' | while IFS= read -r proc; do echo "$cont,\"$proc\""; done; done purpose: Informational tags: built-in, containers, inventory