{"action":"created","issue":{"url":"https://api.github.com/repos/facebook/osquery/issues/1983","repository_url":"https://api.github.com/repos/facebook/osquery","labels_url":"https://api.github.com/repos/facebook/osquery/issues/1983/labels{/name}","comments_url":"https://api.github.com/repos/facebook/osquery/issues/1983/comments","events_url":"https://api.github.com/repos/facebook/osquery/issues/1983/events","html_url":"https://github.com/facebook/osquery/pull/1983","id":144172924,"number":1983,"title":"Introduce decorator queries","user":{"login":"theopolis","id":981645,"avatar_url":"https://avatars.githubusercontent.com/u/981645?v=3","gravatar_id":"","url":"https://api.github.com/users/theopolis","html_url":"https://github.com/theopolis","followers_url":"https://api.github.com/users/theopolis/followers","following_url":"https://api.github.com/users/theopolis/following{/other_user}","gists_url":"https://api.github.com/users/theopolis/gists{/gist_id}","starred_url":"https://api.github.com/users/theopolis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theopolis/subscriptions","organizations_url":"https://api.github.com/users/theopolis/orgs","repos_url":"https://api.github.com/users/theopolis/repos","events_url":"https://api.github.com/users/theopolis/events{/privacy}","received_events_url":"https://api.github.com/users/theopolis/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/facebook/osquery/labels/CLA%20Signed","name":"CLA Signed","color":"009900"},{"url":"https://api.github.com/repos/facebook/osquery/labels/feature","name":"feature","color":"bfe5bf"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/facebook/osquery/milestones/16","html_url":"https://github.com/facebook/osquery/milestones/1.7.4","labels_url":"https://api.github.com/repos/facebook/osquery/milestones/16/labels","id":1658753,"number":16,"title":"1.7.4","description":"","creator":{"login":"theopolis","id":981645,"avatar_url":"https://avatars.githubusercontent.com/u/981645?v=3","gravatar_id":"","url":"https://api.github.com/users/theopolis","html_url":"https://github.com/theopolis","followers_url":"https://api.github.com/users/theopolis/followers","following_url":"https://api.github.com/users/theopolis/following{/other_user}","gists_url":"https://api.github.com/users/theopolis/gists{/gist_id}","starred_url":"https://api.github.com/users/theopolis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theopolis/subscriptions","organizations_url":"https://api.github.com/users/theopolis/orgs","repos_url":"https://api.github.com/users/theopolis/repos","events_url":"https://api.github.com/users/theopolis/events{/privacy}","received_events_url":"https://api.github.com/users/theopolis/received_events","type":"User","site_admin":false},"open_issues":13,"closed_issues":1,"state":"open","created_at":"2016-03-22T00:20:59Z","updated_at":"2016-03-31T03:22:59Z","due_on":"2016-04-11T07:00:00Z","closed_at":null},"comments":3,"created_at":"2016-03-29T06:43:27Z","updated_at":"2016-03-31T03:25:42Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/facebook/osquery/pulls/1983","html_url":"https://github.com/facebook/osquery/pull/1983","diff_url":"https://github.com/facebook/osquery/pull/1983.diff","patch_url":"https://github.com/facebook/osquery/pull/1983.patch"},"body":"New feature! `decorator` queries: a way to enhance result logs with data from queries.\r\n\r\nIf you want to add things like: \r\n- the osquery version\r\n- the last logged in user\r\n- the last executed process\r\n- the hostname (if you're using `--host_identifier=uuid`)\r\n- the hostuuid (if you're NOT using `--host_identifier=uuid`)\r\n\r\nYou can define decorators according to the new \"config specification\" guide in the wiki."},"comment":{"url":"https://api.github.com/repos/facebook/osquery/issues/comments/203734917","html_url":"https://github.com/facebook/osquery/pull/1983#issuecomment-203734917","issue_url":"https://api.github.com/repos/facebook/osquery/issues/1983","id":203734917,"user":{"login":"theopolis","id":981645,"avatar_url":"https://avatars.githubusercontent.com/u/981645?v=3","gravatar_id":"","url":"https://api.github.com/users/theopolis","html_url":"https://github.com/theopolis","followers_url":"https://api.github.com/users/theopolis/followers","following_url":"https://api.github.com/users/theopolis/following{/other_user}","gists_url":"https://api.github.com/users/theopolis/gists{/gist_id}","starred_url":"https://api.github.com/users/theopolis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theopolis/subscriptions","organizations_url":"https://api.github.com/users/theopolis/orgs","repos_url":"https://api.github.com/users/theopolis/repos","events_url":"https://api.github.com/users/theopolis/events{/privacy}","received_events_url":"https://api.github.com/users/theopolis/received_events","type":"User","site_admin":false},"created_at":"2016-03-31T03:25:41Z","updated_at":"2016-03-31T03:25:41Z","body":"This closes #1959."}}