From bd68426b0340237340304fbbea9c2f9715ca372e Mon Sep 17 00:00:00 2001 From: Eric Date: Thu, 16 Nov 2023 13:52:22 -0600 Subject: [PATCH] Update osquery table YAML template (#15078) Changes: - Added the `evented` attribute to the osquery schema table YAML template in the `schema/` folder README. --- schema/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/schema/README.md b/schema/README.md index 503598de44..6135bbb117 100644 --- a/schema/README.md +++ b/schema/README.md @@ -12,6 +12,7 @@ When adding a new YAML override to Fleet's osquery schema you can use this templ ```yaml name: # (required) string - The name of the table. +evented: # boolean - whether or not this table is evented. This value may be required depending on the table's source. description: >- # (required) string - The description for this table. Note: this field supports markdown # Add description here examples: >- # (optional) string - An example query for this table. Note: This field supports markdown