list_docker_container

Column Type
host_identifier BLOB
container_name BLOB
image BLOB
status BLOB
state BLOB
host_port BLOB
port BLOB
ip_address BLOB
process BLOB
owenrship BLOB
created_date

SQL DDL

CREATE VIEW list_docker_container AS
SELECT 
host.host_identifier,
c.container_name,
c.image,
c.status,
c.state,
port.host_port,
port.port,
ni.ip_address,
process.process_name as process,
user.user_name as owenrship,
datetime(created, 'unixepoch', 'localtime') AS created_date
FROM ur_transform_list_container AS c
INNER JOIN ur_transform_list_container_ports AS port ON port.id=c.id
INNER JOIN ur_transform_list_network_information AS ni ON ni.id=c.id AND ni.hostIdentifier=c.hostIdentifier
INNER JOIN surveilr_osquery_ms_node_boundary AS host ON host.host_identifier=c.hostIdentifier
INNER JOIN ur_transform_list_container_process AS process ON process.pid=c.pid AND process.host=c.hostIdentifier
INNER JOIN asset_user_list AS user ON user.uid=process.uid