Hi everyone. I have a newbie question about creating a table. I followed the instructions to create a simple uptime table (I called test). At the end of the building process, I got this error : no rule to build the target " ../specs/test.table", needed for "specs/native/test.cpp". I created 2 files : test.table file and put it in osquery/specs/linux/; and test.cpp and put it in osquery/osquery/tables/utility/. I also added : test.cpp line in the function generateTablesUtilityUtilitytable() in osquery/osquery/tables/utility/CMakeLists.txt; and added android.table line in the function generateNativeTables() in osquery/specs/CMakeLists.txt. I don't see where is the problem here. Why the rule is not found?

Can you show the full build error log? Then, you talk about a

test.table

but also an

android.table

and, by the description, it seems you haven't put both in all the same places? Or it's just a "typo" and they are the same table?

TBH I always grep the code base for another table to make sure I get all the cmake corrections.

Ok thanks for the advice, I think I will do this afterward

Ah I see now. The table doesn't have the correct path. Putting only the name it means the path prefixed to it is the folder where the CMakeLists.txt currently resides, so under the

specs

folder, but the table is under

specs/linux

. So you should put it as

linux/test.table

. Additionally, that table is not really platform independent, so you might want to put it in the Linux branch below

Ok I see. So I put it in platform_dependent_spec_files() like this "linux/test.table:linux" in the file osquery/specs/CMakeLists.txt

yes! :)

I m building now. Thank you for the quick answers !

Yeah that's referred to the content of the test.table file

Ok

The description of the table, "My first table" was missing a final period/dot. Should've been "My first table."

Ok ! That's evil!!

Evil? It’s meant to be english… Is there a way the error should have been clearer?

I meant this was really tricky, or "the devil is in the detail"

Ah, yes… I always end up looking up a prior works so I remember all the details.