Man Pham
04/28/2021, 3:46 PMs key value 0, 1, and 2 stand for in the osquery status log? I checked the link below but couldn’t find what is assigned for 1 and 2 - I think 0=INFO, 1=WARNING, and 2=ERROR? Oh - does anyone know what the i field stand for too? Thanks!
Sample log:
{
"s": 0,
"f": "interface.cpp",
"i": 110,
"m": "Registering extension (kolide, 16829, version=, sdk=)",
"h": "hash_here",
"c": "Fri Mar 19 21:03:27 2021 UTC",
"u": 1616187807
}
https://osquery.readthedocs.io/en/4.8.0/deployment/logging/