fleet/schema/tables/falconctl_options.yml
Brock Walters fb767c0541
Update falconctl_options.yml (#18536)
Fixed typo in "falconctl" string.
2024-04-25 11:41:51 -04:00

11 lines
597 B
YAML

name: falconctl_options
description: Get information about Crowdstrike Falcon agent installed on the host.
evented: false
notes: This table is not a core osquery table. It is included as part of fleetd, the osquery manager from Fleet. Code based on work by [Kolide](https://github.com/kolide/launcher).
platforms:
- linux
columns:
- name: options
description: "The falconctl options to run. Supported values are listed here: `--aid`, `--apd`,`--aph`, `--app`, `--cid`, `--feature`, `--metadata-query`, `--rfm-reason`,`--rfm-state`, `--tags`, `--version`"
type: text
required: true