Hi!
I created an osquery extension, registering a new table.
Is there any way to add this table's schema to Fleet's UI on the "New query" page without having to compile fleet myself?
k
Kathy Satterlee
01/30/2025, 1:59 PM
Hi @Ortal Kombat, In order to add the table to the reference schema in the UI, you would need to make a custom build of Fleet.
o
Ortal Kombat
01/30/2025, 2:49 PM
Ok, thanks!
k
Kathy Satterlee
01/30/2025, 3:22 PM
Any time.
p
Phillip Boushy
01/30/2025, 3:36 PM
I've been trying to figure out when I would want to create an osquery extension...
What kind of data are you collecting that OSQuery can't get already?
@Kathy Satterlee - do you know if there's a feature request to add custom schema into the list?
k
Kathy Satterlee
01/30/2025, 3:50 PM
There are a ton of use cases for extensions! The most common one I see is gathering data from internal or more obscure tools.
There are also extensions that have write capabilities for certain tools, like this one for Santa
Kathy Satterlee
01/30/2025, 3:51 PM
I’m not seeing any feature requests for adding a custom schema to the UI.