1#@!#!123s

: / opt / osquery / share / osquery / packs /

Filename : nf-inventory-virtualization-kvm.conf

back

{
  "discovery": [
    "SELECT * FROM systemd_units WHERE id == 'libvirtd.service' AND active_state == 'active' AND sub_state == 'running';"
  ],
  "queries": {
    "virtual_machines": {
      "query": "SELECT * FROM virtual_machines;",
      "interval": 86400,
      "platform": "linux",
      "snapshot": true
    }
  }
}