osquery-1/specs/logged_in_users.table
Teddy Reed b28c4d8d0f Introduce table options (#2101)
Table options includes a change to the Registry::call API for TablePlugins.
When requesting route information or the 'columns' action, a new 'op' key is included.
2016-05-18 12:23:52 -07:00

12 lines
413 B
Plaintext

table_name("logged_in_users")
description("Users with an active shell on the system.")
schema([
Column("user", TEXT, "User login name"),
Column("tty", TEXT, "Device name"),
Column("host", TEXT, "Remote hostname"),
Column("time", INTEGER, "Time entry was made"),
Column("pid", INTEGER, "Process (or thread) ID"),
])
attributes(cacheable=True)
implementation("logged_in_users@genLoggedInUsers")