soldr-modules/osquery_linux/1.0.0/config/default_event_config.json

{
    "osquery_linux_already_installed": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_already_started": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_config_updated_error": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_config_updated_success": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_installed_error": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_installed_success": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_started_error": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_started_success": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_unexpected_stopped": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_unexpected_uninstalled": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_uninstalled_error": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "reason",
            "version"
        ],
        "type": "atomic"
    },
    "osquery_linux_uninstalled_success": {
        "actions": [
            {
                "fields": [],
                "module_name": "this",
                "name": "log_to_db",
                "priority": 10
            }
        ],
        "fields": [
            "version"
        ],
        "type": "atomic"
    }
}