Commit graph

151 commits

Author SHA1 Message Date
Eric
44680cbe15
(2024-06-11) Regenerate osquery_fleet_schema.json (#19653)
Closes: #19611

Changes:
- Regenerated `schema/osquery_fleet_schema.json`
2024-06-11 11:37:30 -05:00
Brock Walters
c9ebab7cac
Update package_install_history.yml (#19635)
Update package_install_history per #16993
2024-06-11 11:56:22 -04:00
Brock Walters
7698bde029
Update etc_hosts.yml (#19640)
added backticks / fixed width font for file paths
2024-06-11 11:44:07 -04:00
Brock Walters
6e0ef1f446
Create pipes.yml (#19638)
Create pipes table per #16993

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-06-11 11:43:54 -04:00
Brock Walters
d69a4406a5
Update platform_info.yml (#19637)
Updates to Update platform_info table per #16993
2024-06-11 11:30:43 -04:00
Brock Walters
b45dbdc58e
Update package_bom.yml (#19634)
Updates to the package_bom table per #16993
2024-06-11 11:13:23 -04:00
Dante Catalfamo
ecef0d4263
fleetd_logs table (#19489)
#18234
2024-06-11 11:02:50 -04:00
Brock Walters
9b263de850
Update etc_hosts.yml (#19532)
made file paths bullets instead of 1 line.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-06-06 17:02:25 -04:00
Brock Walters
1045136cb1
Update etc_hosts.yml (#19517)
Updates to etc_hosts per #16993

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-06-05 11:14:06 -04:00
Eric
ba6ae8f8db
Regenerate osquery_fleet_schema.json (#19488)
Closes: #19439
2024-06-04 10:47:47 -05:00
Brock Walters
82f592bfdd
Update authdb.yml (#19477)
The Example header was not showing on this page. Moved the query up to
the example block with explanation.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-06-04 11:27:15 -04:00
Brock Walters
23d8e0a9bf
Update system_controls.yml (#19478)
Updates to system_controls data table in Fleet Table Docs per #16993

Added 2-space indent on every line following |- scaler...
2024-06-04 11:26:52 -04:00
Brock Walters
3968c49683
Create cpu_info.yml (#19435)
Updates to cpu_info data table in Fleet Table Docs per #16993

I am trying something. The arp_cache table .yml has no references to the
Column || Type || Description schema table on the page, so, I am
assuming you are doing magic to combine the other sections of the page
(Description, Examples, Notes) with the data from osquery tables.

If I needed to make explicit reference to them, I am dumb. 

If I only to need to make explicit reference to them IFF I am changing
the schema table, yay.

Thanks!!!!!!!

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-06-03 21:17:14 -04:00
Brock Walters
d8489c4f2b
Update cpu_time.yml (#19432)
Updates to cpu_time data table in Fleet Table Docs per
https://github.com/fleetdm/fleet/issues/16993

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-06-03 17:05:48 -04:00
Brock Walters
608f3d82f7
Update arp_cache.yml (#19406)
Moved ARP Cache wikipedia link into sentence to save some room...
2024-06-03 10:40:23 -04:00
Eric
02d29759a2
Schema: fix example queries (#19426)
Changes:
- Fixed schema examples that were mistakenly updated in #19296
2024-05-31 15:42:06 -05:00
Brock Walters
893766efdd
Update chrome_extensions.yml (#19397)
Please check the new scalar is working correctly. I am going to have to
do a PR on the authdb table because some of the markdown syntax is
showing on the updated page. Thanks!

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-31 12:02:06 -04:00
Brock Walters
72827bc3ad
Update authdb.yml (#19399)
Fixed copy+paste or find+replace booboo when scalar was changed from >-
to |-

Copy operation caught up the angle brackets used around "right_name" in
this doc.

Thanks.
2024-05-31 09:18:14 -05:00
Noah Talerman
78037e246b
Add attribution for Mac Admins tables (#19302)
- Add note for all tables
2024-05-28 12:59:35 -04:00
Eric
02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00
Brock Walters
88e94b1c4f
Update authdb.yml (#19274)
Modified Description field.
2024-05-24 15:23:09 -04:00
Brock Walters
4545e960ae
Update arp_cache.yml (#19254)
Updates to Fleet Table Docs per
https://github.com/fleetdm/fleet/issues/16993

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-24 15:05:57 -04:00
Brock Walters
3f926e7569
Update authdb.yml (#19161)
Need help to get the correct formatting for the notes key/val

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2024-05-24 07:40:32 -04:00
Eric
9eb8508b30
Schema: Update version of osquery schema (#18890)
Changes:
- Updated the version of osquery schema that is merged with Fleet's
overrides: (5.11.0 » 5.12.1)
- Regenerated schema/osquery_fleet_schema.json
2024-05-13 16:52:01 -05:00
Victor Lyuboslavsky
c77dea8c2b
Schema documentation for new SOFA tables. (#18853)
#18832 
Schema documentation for new SOFA tables from macadmins extension.
2024-05-09 10:50:16 -05:00
Eric
85a8647700
Schema: Regenerate osquery_fleet_schema.json (#18781)
Closes: #18761

changes:
- Regenerated `schema/osquery_fleet_schema.json`
2024-05-06 16:42:00 -05:00
Brock Walters
a603304946
Update puppet_info.yml (#18687)
Fixed type in noop_pending key
2024-05-02 10:14:22 -04:00
Eric
5db04b937c
Regenerate osquery_fleet_schema.json (2024-04-30) (#18658)
Closes: #18600

Changes:
 - regenerated `schema/osquery_fleet_schema.json`
2024-04-30 16:55:01 -05:00
Rachael Shaw
895d4bc2f7
Use "Fleet's agent (fleetd)" naming in the docs (#18138)
For #16512

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-29 11:12:03 -05:00
JD
8eec8e5371
Update spelling & grammar in pwd_policy.yml (#18547)
Markdown updates to spelling and grammar.
2024-04-26 18:02:16 -05:00
Brock Walters
fb767c0541
Update falconctl_options.yml (#18536)
Fixed typo in "falconctl" string.
2024-04-25 11:41:51 -04:00
Eric
084ddb5dd8
Regenerate osquery_fleet_schema.json (2024-04-22) (#18476)
Closes: #18442
2024-04-22 18:10:10 -05:00
Eric
c2f333aebb
Schema: Update schema overrides to only use one YAML block scalar (#18351)
Closes: #18240

Changes:
- Updated the schema override files to use only one YAML block scalar
(`>-`)
- Updated the template yaml included in the link to create a new
override file in get-extended-osquery-schema helper to use the `>-`
block scalar
- regenerated osquery_fleet_schema.json
2024-04-16 18:35:23 -05:00
Victor Lyuboslavsky
a27634deb1
Updating orbit_info schema. (#18135)
#17148
#17361 

In orbit_info table, added the following fields:
- desktop_version
- scripts_enabled
2024-04-10 09:50:26 -05:00
Eric
d6036b181b
Schema: Remove unused and outdated schema/fleet_schema.json (#18092)
Changes:
- Deleted `schema/fleet_schema.json` (This file was previously used when
merging the osquery schema with Fleet's overrides before we switched to
using YAML override files).
- Updated the description of the `generate-merged-schema` script.
2024-04-05 17:13:32 -05:00
Eric
766d08e767
Schema: remove requires_user_context related code, regenerate schema json. (#18091)
Changes:
- Updated the `build-static-content` script to remove support for the
`requires_user_context` column attribute
- Updated `get-extended-osquery-schema` to not set a
`requires_user_context` value in the merged schema json.
- Regenerated `schema/osquery_fleet_schema.json`
2024-04-05 15:39:02 -05:00
Rachael Shaw
55df14a23e
Update schema overrides to clarify which tables require joining against users (#18045)
For #16784.

These tables require joining against `users`:
+ `chrome_extension_content_scripts`
+ `chrome_extensions`
+ `firefox_addons`
+ `vscode_extensions`
+ `browser_plugins`
+ `crashes`
+ `preferences`
+ `safari_extensions`
+ `ssh_configs`
+ `user_ssh_keys`
+ `authorized_keys`
+ `known_hosts`
+ `shell_history`

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-05 11:11:18 -05:00
Zach Wasserman
e3deceeb6d
Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)
For #17577

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux. (performed only on macOS)
2024-04-03 09:13:04 -07:00
Eric
2ae85ac2c4
Website: update get-extended-osquery-schema helper to ensure all column types are lowercase. (#17931)
Closes: #17883

Changes:
- Updated the `get-extended-osquery-schema` helper to set the `type`
values of columns of tables with Fleet overrides to be lowercase.
- Regenerated `osquery_fleet_schema.json`
2024-04-01 12:05:42 -05:00
Eric
286d6f86eb
Update examples in osquery_fleet_schema.json (#17932)
Related to: https://github.com/fleetdm/fleet/issues/17861

Changes: 
- Updated `get-extended-osquery-schema` helper to remove `examples`
values from the merged schema JSON if they are an empty array.
- regenerated `osqeury_fleet_schema.json`
2024-03-29 19:41:13 -05:00
Eric
1f1f0ce4d0
Update Fleet schema overrides (string » text) & regenerate osquery_fleet_schema.json (#17884)
Changes:
- Updated the type of all override columns with `type:string` to
`type:text`
- Regenerated `osquery_fleet_schema.json`
2024-03-27 08:17:28 -05:00
Eric
a450bf2c58
Website: update get-extended-osquery-schema helper (#17190)
Closes: https://github.com/fleetdm/fleet/issues/17188

Changes:
- Updated `get-extended-osquery-schema.js` to only include the last
example from the osquery schema if a table has an override file that
does not contain an `examples` value.
- Regenerated osquery_fleet_schema.json with the correct `examples`
values
2024-03-01 12:48:06 -06:00
Eric
73a5d6ba99
Regenerate osquery_fleet_schema.json (2024-02-21) (#17063)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`schema/osquery_fleet_schema.json`
2024-02-21 15:58:33 -06:00
Mike McNeil
24a783b412
Update account_policy_data.yml (#16963)
.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-02-21 12:46:58 -06:00
Mike McNeil
775decf152
Update account_policy_data.yml (#16962)
... <!-- being naughty to save time -->
2024-02-19 12:48:03 -06:00
Eric
8878613277
Update vscode_extensions override file & regenerate merged schema (#16829)
Changes:
- Added a newline before the code block in the example of the
`vscode_extensions` table override to fix the formatting of the page
generated for this table (see screenshot)
- Ran the `generate-merged-schema` script to regenerate
`osquery_fleet_schema.json`
<img width="860" alt="image"
src="https://github.com/fleetdm/fleet/assets/7445991/1f6f1b37-1240-4d16-b102-f67ecff5fb28">
2024-02-14 13:40:50 -06:00
Noah Talerman
260fd225e8
fleetdm.com/tables: vscode_extensions (#16779)
- Add override file
- Add description
- Add example query
- Add note: Querying for VS Code extensions requires joining against the
`users` table.
- Add columns
2024-02-14 10:05:31 -05:00
Eric
98e825e434
Update osquery schema version, regenerate merged schema JSON (#16597)
For https://github.com/fleetdm/fleet/issues/13891

Changes:
- Updated the version of the osquery schema used to generate
osqeury_fleet_schema.json (`5.9.1` » `5.11.0`)
- Removed the table override file for the `atom_packages` table (It was
removed from the osquery schema, our override file was previously hiding
the table)
- Ran the `generate-merged-schema` script to regenerate
osquery_fleet_schema.json
2024-02-05 17:30:41 -06:00
Noah Talerman
558ef6497f
fleetdm.com/tables: Add Fleet override for process_file_events docs (#16503)
- To address the bug, we decided to document the current behavior: The
`process_file_events table` will only emit events for changes and files
in directories that existed before osquery starts.
2024-02-02 15:47:23 -05:00
Eric
b133e51a59
Regenerate osquery_fleet_schema.json (#16072)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`osquery_fleet_schema.json`
2024-01-11 15:34:08 -06:00