fleet/schema/tables/puppet_logs.yml
Rachael Shaw 895d4bc2f7
Use "Fleet's agent (fleetd)" naming in the docs (#18138)
For #16512

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-29 11:12:03 -05:00

42 lines
No EOL
1.1 KiB
YAML

name: puppet_logs
notes: This table is not a core osquery table. It is included as part of Fleet's agent ([fleetd](https://fleetdm.com/docs/get-started/anatomy#fleetd)).
description: Outputs [Puppet](https://puppet.com/) logs from the last run.
platforms:
- darwin
- windows
- linux
evented: false
examples: >-
List Puppet logs that are of a level of anything but informational.
```
SELECT * FROM puppet_logs WHERE level!='info';
```
columns:
- name: level
description: The level of the log item (info, error, etc).
required: false
type: text
- name: message
description: The log message content.
required: false
type: text
- name: source
description: The source of the log item.
required: false
type: text
- name: time
description: The time at which this item was logged.
required: false
type: text
- name: file
description: The file from which osquery read this log.
required: false
type: text
- name: line
description: The line from which this log item was read.
required: false
type: text