osquery_events

Information about the event publishers and subscribers.

Table schema

Name Type Description
name TEXT Event publisher or subscriber name
publisher TEXT Name of the associated publisher
type TEXT Either publisher or subscriber
subscriptions INTEGER Number of subscriptions the publisher received or subscriber used
events INTEGER Number of events emitted or received since osquery started
refreshes INTEGER Publisher only: number of runloop restarts
active INTEGER 1 if the publisher or subscriber is active else 0