fleet/schema/tables/nftables.yml
Lucas Manuel Rodriguez 9daa5a2950
Add docs for the nftables fleetd table (#24749)
#15651

We missed to add the docs in the original PR:
https://github.com/fleetdm/fleet/pull/23941

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-12-13 21:34:24 -03:00

27 lines
954 B
YAML

name: nftables
notes: This table is not a core osquery table. It is included as part of Fleet's agent ([fleetd](https://fleetdm.com/docs/get-started/anatomy#fleetd)).
description: Show configuration for Linux `nftables` network filters in JSON flattened format. (Added in fleetd 1.37.0.)
platforms:
- linux
evented: false
columns:
- name: fullkey
description: Flattened full key with '/' as separator, e.g. `nftables/0/metainfo/json_schema_version`.
required: false
type: text
- name: parent
description: Parent key when keys are nested in the document.
required: false
type: text
- name: key
description: JSON key or array index.
required: false
type: text
- name: value
description: JSON value
required: false
type: text
- name: query
description: Specifies a query to flatten with. This is used both for re-writing arrays into maps, and for filtering.
required: false
type: text