osquery-1/osquery/core/tests
Seshu Pasam 6fab8b6083 logging: adding "counter" to differentiate initial results (#3651)
When setting up alerts for differential logs data you might want to skip the
initial added records. counter can be used to identify if the added records
are all records from initial query of if they are new records. For initial
query results that includes all records counter will be "0". For subsequent
query executions counter will be incremented by 1. When epoch changes, counter
will be reset back to "0".
2017-09-07 15:01:15 -07:00
..
posix Simplify Registry and plugin concepts (#2887) 2017-01-07 12:21:35 -08:00
conversions_tests.cpp [Fix #2734] Remove OpenSSL link dependency for osquery core (#2750) 2016-12-22 00:37:59 -08:00
flags_tests.cpp Core and Additional Tests (#2441) 2016-09-12 09:46:52 -07:00
process_tests.cpp freebsd: Fix tests and additional_tests (process, config) (#3239) 2017-04-29 19:53:53 -07:00
query_tests.cpp logging: adding "counter" to differentiate initial results (#3651) 2017-09-07 15:01:15 -07:00
status_tests.cpp [osquery] Update copyright headers to new format. 2016-02-11 11:48:58 -08:00
tables_tests.cpp Allow caching for tables with indexes and additionals (#3472) 2017-07-18 00:08:38 -07:00
time_tests.cpp Adding hostIdentifier, calendarTime, unixTime to status logging (#3146) 2017-04-10 11:56:23 -07:00
watcher_tests.cpp watcher: Add initial watchdog delay (#3360) 2017-06-08 18:03:30 +01:00