fleet/schema/tables/sntp_request.yml
Eric c2f333aebb
Schema: Update schema overrides to only use one YAML block scalar (#18351)
Closes: #18240

Changes:
- Updated the schema override files to use only one YAML block scalar
(`>-`)
- Updated the template yaml included in the link to create a new
override file in get-extended-osquery-schema helper to use the `>-`
block scalar
- regenerated osquery_fleet_schema.json
2024-04-16 18:35:23 -05:00

23 lines
860 B
YAML

name: sntp_request
platforms:
- darwin
- windows
- linux
description: Allows querying the timestamp and clock offset from a SNTP server (in millisecond precision).
columns:
- name: server
type: text
required: true
description: Address of the SNTP server to query.
- name: timestamp_ms
type: bigint
required: false
description: Timestamp returned by the SNTP server in milliseconds.
- name: clock_offset_ms
type: bigint
required: false
description: Offset between the host's time and the SNTP time in milliseconds.
notes: >-
This table is not a core osquery table. It is included as part of [Fleetd](https://fleetdm.com/docs/using-fleet/orbit), the osquery manager from Fleet.
Fleetd installers can be built with [fleetctl](https://fleetdm.com/docs/using-fleet/adding-hosts#osquery-installer).
evented: false