osquery-1/specs/kernel_info.table
Teddy Reed c2be670806 Table results caching
1. Table implementations (spec files) can mark the table as 'cachable'.
2. Cached results depend on the shortest/quickest interval of scheduled
queries that act on results of the table.
3. The table API generator blocks caching on index/additional/required
table column options.
2015-11-14 15:57:23 -08:00

11 lines
350 B
Plaintext

table_name("kernel_info")
description("Basic active kernel information.")
schema([
Column("version", TEXT, "Kernel version"),
Column("arguments", TEXT, "Kernel arguments"),
Column("path", TEXT, "Kernel path"),
Column("device", TEXT, "Kernel device identifier"),
])
attributes(cachable=True)
implementation("system/kernel_info@genKernelInfo")