fleet/schema/tables/osquery_info.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

56 lines
965 B
YAML

name: osquery_info
platforms:
- darwin
- windows
- linux
- chrome
columns:
- name: pid
platforms:
- darwin
- windows
- linux
- name: uuid
platforms:
- darwin
- windows
- linux
- name: instance_id
platforms:
- darwin
- windows
- linux
- name: config_hash
platforms:
- darwin
- windows
- linux
- name: config_valid
platforms:
- darwin
- windows
- linux
- name: start_time
platforms:
- darwin
- windows
- linux
- name: watcher
platforms:
- darwin
- windows
- linux
- name: platform_mask
platforms:
- darwin
- windows
- linux
examples: |-
See the version of the currently running osquery.
```
SELECT version FROM osquery_info;
```
notes: |-
- On ChromeOS, this table requires the [fleetd Chrome extension](https://fleetdm.com/docs/using-fleet/chromeos).