mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
c2be670806
1. Table implementations (spec files) can mark the table as 'cachable'. 2. Cached results depend on the shortest/quickest interval of scheduled queries that act on results of the table. 3. The table API generator blocks caching on index/additional/required table column options.
13 lines
453 B
Plaintext
13 lines
453 B
Plaintext
table_name("last")
|
|
description("System logins and logouts.")
|
|
schema([
|
|
Column("username", TEXT, "Entry username"),
|
|
Column("tty", TEXT, "Entry terminal"),
|
|
Column("pid", INTEGER, "Process (or thread) ID"),
|
|
Column("type", INTEGER, "Entry type, according to ut_type types (utmp.h)"),
|
|
Column("time", INTEGER, "Entry timestamp"),
|
|
Column("host", TEXT, "Entry hostname"),
|
|
])
|
|
attributes(cachable=True)
|
|
implementation("last@genLastAccess")
|