steampipe plugin install grendel-consulting/kolidesteampipe plugin install grendel-consulting/kolide

Table: kolide_audit_log

Lists the tracked events occurring in the Kolide web console.

Examples

select
  timestamp,
  description,
  actor_name
from
  kolide_audit_log;

select
  timestamp,
  description,
  actor_name
from
  kolide_audit_log
where
  timestamp > date_trunc('day', current_date) - interval '1 day';

select
  timestamp,
  description,
from
  kolide_audit_log
where
  actor_name = 'Dennis Nedry';

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
actor_name	text	=, ~~	Name of the entity triggering this event.
description	text	=, ~~	Description of the event that occurred.
id	text	=	Canonical identifier for this audit log event.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
timestamp	timestamp with time zone	=, >, <	When this event occurred.
title	text		Display name for this event.