id = "osqueryi" name = "osqueryi" description = "Interactive shell for osquery, which exposes the operating system as SQL tables." executables = ["osqueryi"] [commands] format = 1 label = "Start osquery shell" description = "Start the osquery shell with a chosen output format. Queries are typed in the shell." quality = "ai-draft" base = "fig:osqueryi" parser = { end_of_options = "--", interleave = "permute", long_equals = true, short_attached = true, short_bundles = false } [[commands.source]] id = "fig" kind = "completion" url = "https://github.com/withfig/autocomplete/blob/master/src/osqueryi.ts" license = "MIT" [[commands.field]] id = "json" label = "JSON output" type = "boolean" option = ["--json"] sources = ["fig"] [[commands.field]] id = "csv" label = "CSV output" type = "boolean" option = ["--csv"] sources = ["fig"] [[commands.field]] id = "line" label = "Line output" type = "boolean" option = ["--line"] sources = ["fig"] [[commands.field]] id = "separator" label = "Field separator" type = "string" option = ["--separator"] sources = ["fig"] [[commands.field]] id = "nullvalue" label = "NULL placeholder" type = "string" option = ["--nullvalue"] sources = ["fig"] [[commands.field]] id = "config_path" label = "Config file" type = "path" option = ["--config_path"] path = { kind = "file", role = "input" } sources = ["fig"] [[commands.field]] id = "verbose" label = "Verbose messages" type = "boolean" option = ["--verbose"] sources = ["fig"] [[commands.task]] id = "json" label = "JSON output" set = { json = [true] } fields = ["json", "config_path", "verbose"] required = [] [[commands.group]] id = "basic" label = "Basic" fields = ["json", "csv", "line", "separator", "nullvalue"] [[commands.group]] id = "advanced" label = "Advanced" fields = ["config_path", "verbose"]