osquery_schedule¶
Information about the current queries that are scheduled in osquery.
Platform support¶
Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: osquery_schedule
- Windows
- Linux
- Mac OSX
- Free BSD
Table schema¶
Name | Type | Description |
---|---|---|
name | TEXT | The given name for this query |
query | TEXT | The exact query to run |
interval | INTEGER | The interval in seconds to run this query, not an exact interval |
executions | BIGINT | Number of times the query was executed |
last_executed | BIGINT | UNIX time stamp in seconds of the last completed execution |
blacklisted | INTEGER | 1 if the query is blacklisted else 0 |
output_size | BIGINT | Total number of bytes generated by the query |
wall_time | BIGINT | Total wall time spent executing |
user_time | BIGINT | Total user time spent executing |
system_time | BIGINT | Total system time spent executing |
average_memory | BIGINT | Average private memory left after executing |