osquery-1/specs/shell_history.table
2015-06-05 22:03:15 -07:00

11 lines
437 B
Plaintext

table_name("shell_history")
description("A line-delimited (command) table of per-user .*_history data.")
schema([
Column("username", TEXT, "Shell history owner",
additional=True),
Column("command", TEXT, "Unparsed date/line/command history line"),
Column("history_file", TEXT, "Path to the .*_history for this user"),
ForeignKey(column="username", table="users"),
])
implementation("shell_history@genShellHistory")