search

fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.17k stars 434 forks source link

Automate documentation of tables that require joining against the users table #18088

Open rachaelshaw opened 8 months ago

rachaelshaw commented 8 months ago

UPDATE: For now, plan is to file an osquery issue to update the osquery schema w/ user_data info (or something like it) so that Fleet can get this info w/o having to pull each individual table (noahtalerman 2024-04-19).

Problem

For #16784, we manually updated our osquery schema overrides to clearly document which tables require joining against the users table. To do so, we checked for tables with user_data=True (e.g. this one) in the osquery repo. That information isn't currently included in the osquery schema JSON, but if it were, we could use it in our website code to automate the example queries/notes for these tables and keep it up-to-date going forward.

Potential solutions

noahtalerman commented 6 months ago

@rachaelshaw this one didn't make the 3-week drafting => estimation timeline. Bringing it back to feature fest.