osquery-1/specs/last.table
2015-07-15 23:23:42 -07:00

12 lines
427 B
Plaintext

table_name("last")
description("System logins and logouts.")
schema([
Column("username", TEXT, "Entry username"),
Column("tty", TEXT, "Entry terminal"),
Column("pid", INTEGER, "Process (or thread) ID"),
Column("type", INTEGER, "Entry type, according to ut_type types (utmp.h)"),
Column("time", INTEGER, "Entry timestamp"),
Column("host", TEXT, "Entry hostname"),
])
implementation("last@genLastAccess")