osquery-1/specs/last.table
Teddy Reed a105924804 Move specs to a top-level path, add query examples
1. Example queries will run with an (optional) integration test.
2. Fix bad accesses with OS X package BOMs
3. Move spec files from ./osquery/tables/specs to ./specs
4. Remove server parsers (netlib) from client builds.
2015-06-03 10:39:05 -07:00

12 lines
303 B
Plaintext

table_name("last")
description("System logins and logouts.")
schema([
Column("username", TEXT),
Column("tty", TEXT),
Column("pid", INTEGER, "Process (or thread) ID"),
Column("type", INTEGER),
Column("time", INTEGER),
Column("host", TEXT),
])
implementation("last@genLastAccess")