fleet/schema/tables/logged_in_users.yml
Eric e82962e4a7
Add Fleet override schema files (#8278)
* create schema/tables, add yaml schema tables

* Update osquery-table-details.ejs

* Generate schema from schema/tables/ folder

* Create generate-yaml-tables-from-json.js

* update created table files

* update fleet override validation

* update error messages, add fleetRepoUrl

* Delete generate-yaml-tables-from-json.js

* Update osquery-table-details.ejs

* Update whitespace in table examples

* Revert "Update osquery-table-details.ejs"

This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468.

* add YAML tables generated from updated Fleet schema

* lint fixes

* update arp_cache and docker_containers tables
2022-10-18 14:13:42 -05:00

17 lines
299 B
YAML

name: logged_in_users
examples: >-
See the user currently logged in on the console of the computer.
```
SELECT user, type, tty from logged_in_users WHERE tty='console';
```
columns:
- name: sid
platforms:
- windows
- name: registry_hive
platforms:
- windows