Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
parse_jsonl
Parses each line of a file as a separate JSON document. See parse_json
to treat an entire file as a single JSON document.
Column | Type | Description |
---|---|---|
fullkey | text | Key including any parent keys or document indices. |
key | text | INI key |
parent | text | Parent key when keys are nested in the document. |
path | text | Path of the file to read. Required in WHERE clause |
value | text | INI value |
This table is not a core osquery table. It is included as part of Fleet's agent (fleetd).