fleet/schema/tables/cpu_time.yml
Eric e82962e4a7
Add Fleet override schema files (#8278)
* create schema/tables, add yaml schema tables

* Update osquery-table-details.ejs

* Generate schema from schema/tables/ folder

* Create generate-yaml-tables-from-json.js

* update created table files

* update fleet override validation

* update error messages, add fleetRepoUrl

* Delete generate-yaml-tables-from-json.js

* Update osquery-table-details.ejs

* Update whitespace in table examples

* Revert "Update osquery-table-details.ejs"

This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468.

* add YAML tables generated from updated Fleet schema

* lint fixes

* update arp_cache and docker_containers tables
2022-10-18 14:13:42 -05:00

11 lines
204 B
YAML

name: cpu_time
examples: >-
Identify overworked CPUs using a ratio of system to user CPU usage. Here, a
ratio of 2 was arbitrarily chosen.
```
SELECT * FROM cpu_time WHERE user/system>2;
```