mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 08:58:41 +00:00
02437a098e
Closes: #19271 Closes: #19286 Changes: - Updated the example in the schema folder readme - Updated the block scalar used in Fleet's osquery override documentation (`>-` » `|-`) and removed extra newlines - Updated the block scalar used in URLs used to create new yaml override files - Regenerated osqeury_fleet_schema.json
45 lines
1.5 KiB
YAML
45 lines
1.5 KiB
YAML
name: apfs_physical_stores
|
|
platforms:
|
|
- darwin
|
|
description: Information about APFS physical stores from the `diskutil apfs list -plist` command.
|
|
columns:
|
|
- name: container_uuid
|
|
type: text
|
|
required: false
|
|
description: The UUID of the APFS Contianer
|
|
- name: container_designated_physical_store
|
|
type: text
|
|
required: false
|
|
description: |-
|
|
The disk displayed as the backing store of the container. There may be multiple,
|
|
use `apfs_physical_stores` to see all actual physical stores
|
|
- name: container_reference
|
|
type: text
|
|
required: false
|
|
description: The current reference for the APFS container, e.g. "disk3"
|
|
- name: container_fusion
|
|
type: text
|
|
required: false
|
|
description: Whether this container is on a "fusion drive" (i.e. SSHD)
|
|
- name: container_capacity_ceiling
|
|
type: bigint
|
|
required: false
|
|
description: The total amount of space in the container
|
|
- name: container_capacity_free
|
|
type: bigint
|
|
required: false
|
|
description: The amount of remaining free space in the container
|
|
- name: uuid
|
|
type: text
|
|
required: false
|
|
description: The UUID of the physical store
|
|
- name: identifier
|
|
type: text
|
|
required: false
|
|
description: The current identifier of the physical store (e.g. disk1s2)
|
|
- name: size
|
|
type: bigint
|
|
required: false
|
|
description: The size of the physical store in byptes
|
|
notes: This table is not a core osquery table. It is included as part of Fleet's agent ([fleetd](https://fleetdm.com/docs/get-started/anatomy#fleetd)).
|
|
evented: false
|