fleet/schema/tables/puppet_logs.yml
Eric 07f8ec14e6
Update YAML schema table validation (#9302)
Changes:
- Added three errors to
`website/api/helpers/get-extended-osquery-schema.js` that are thrown if
a YAML schema table has:
   - A `platforms` value that is not an array
   - A `description` value that is not a string
   - A `columns` value that is not an array
- Updated the `platforms` of YAML schema tables in `schema/tables/` that
had string `platforms` values
- Regenerated `/schema/osquery_fleet_schema.json`
 
.
2023-01-13 10:16:36 -06:00

42 lines
1.2 KiB
YAML

name: puppet_logs
notes: Requires [macadmins-extension](https://github.com/macadmins/osquery-extension/), which is included by default on osquery packages built with [fleetctl](https://fleetdm.com/docs/using-fleet/adding-hosts#osquery-installer).
description: Outputs [Puppet](https://puppet.com/) logs from the last run.
platforms:
- darwin
- windows
- linux
evented: false
examples: >-
List Puppet logs that are of a level of anything but informational.
```
SELECT * FROM puppet_logs WHERE level!='info';
```
columns:
- name: level
description: The level of the log item (info, error, etc).
required: false
type: text
- name: message
description: The log message content.
required: false
type: text
- name: source
description: The source of the log item.
required: false
type: text
- name: time
description: The time at which this item was logged.
required: false
type: text
- name: file
description: The file from which osquery read this log.
required: false
type: text
- name: line
description: The line from which this log item was read.
required: false
type: text