{"resources":{"ipmi":{"id":"ipmi","name":"ipmi","fields":{"asset":{"name":"asset","type":"\u001basset","title":"Asset this root belongs to","desc":"Platform, version, identity and labels of the asset this root describes.","provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true},"channel":{"name":"channel","type":"\u001bipmi.channel","title":"IPMI communication channel","desc":"One communication channel of the baseboard management controller. The mediumType field says whether the channel carries IPMI over 802.3 LAN, a serial connection or the local system interface, and accessMode says whether the channel is disabled, reachable only before the host boots, always available, or shared with a serial connection. The privilegeLimit field is the ceiling every session on the channel is held to regardless of the account used, and the remaining fields report the capabilities the controller advertises before any session exists: which authentication types it accepts for administrator sessions, and whether a login with no username, or with no username and no password, is accepted at all.","is_private":true,"provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true},"channels":{"name":"channels","type":"\u0019\u001bipmi.channel","title":"Communication channels the management controller exposes","desc":"One entry per channel the controller implements, covering the LAN channel that carries IPMI across the network as well as the local system interface. Each entry reports the access mode that decides whether the channel answers at all, the privilege ceiling every session on it is held to, and the authentication capabilities the controller advertises before a session exists.","min_provider_version":"13.0.29","provider":"go.mondoo.com/mql/providers/ipmi"},"chassis":{"name":"chassis","type":"\u001bipmi.chassis","title":"IPMI system chassis","desc":"Chassis-level power and physical state of a server reachable through its IPMI baseboard management controller. The status field reports whether main power is on, power fault and overload flags, chassis intrusion, front-panel lockout, and drive or cooling-fan faults, so an audit can confirm a host is powered and healthy out of band. The systemBootOptions field exposes the configured boot device and the BIOS boot-flag overrides.","provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true},"deviceID":{"name":"deviceID","type":"\n","title":"Hardware and firmware device ID of the management controller","desc":"Dict returned by the Get Device ID command. Keys: `deviceID`, `deviceRevision`, `providesDeviceSDRs`, `deviceAvailable`, `firmwareRevision`, `ipmiVersion`, `manufacturerID`, `manufacturerName`, `productID`, `productName`, and `additionalDeviceSupport` (a nested dict of booleans `sensorDevice`, `sdrRepositoryDevice`, `selDevice`, `fruInventoryDevice`, `ipmbEventReciever`, `ipmbEventGenerator`, `bridge`, and `chassisDevice`).","provider":"go.mondoo.com/mql/providers/ipmi"},"guid":{"name":"guid","type":"\u0007","title":"GUID (Globally Unique ID) for management controller","provider":"go.mondoo.com/mql/providers/ipmi"},"lanConfig":{"name":"lanConfig","type":"\u001bipmi.lanConfig","title":"IPMI over LAN configuration","desc":"The network-facing configuration of the channel the current session runs over. The authTypeEnables field reports, per privilege level, which authentication types the controller will accept, so a level that lists none accepts unauthenticated sessions at that privilege. The cipher suite fields cover RMCP+ negotiation, where cipherZeroEnabled is the case in which authentication is negotiated and then not performed. The badPasswordThreshold, userLockoutIntervalSeconds and attemptCountResetIntervalSeconds fields are the only bound IPMI places on repeated password guessing. The SNMP community string parameter is credential material and is not read.","provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true},"sel":{"name":"sel","type":"\u001bipmi.sel","title":"IPMI system event log","desc":"State of the system event log of the baseboard management controller, the record a server keeps of chassis intrusions, power events, sensor threshold crossings and failed authentications. The loggingEnabled field says whether the controller is writing to the log at all, entryCount how many records it currently holds, and lastAddTime when a record was last written, so an empty or stalled log on a long-running server is visible.","provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true},"solConfig":{"name":"solConfig","type":"\u001bipmi.solConfig","title":"Serial-over-LAN configuration","desc":"The Serial-over-LAN settings of the channel the current session runs over. Serial-over-LAN delivers the host serial console across the network, so everything typed at a root prompt travels over it. The forceEncryption field decides whether that traffic is encrypted, forceAuthentication whether it is authenticated, and privilegeLevel the privilege a session must hold to open the console.","provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true},"user":{"name":"user","type":"\u001bipmi.user","title":"IPMI management controller account","desc":"One account slot of the baseboard management controller, as it applies to the channel the current session runs over. The name is empty when the slot has no username set, which combined with a privilegeLimit above callback is an account reachable without naming a user. The privilegeLimit, linkAuthenticationEnabled, ipmiMessagingEnabled and callbackOnly fields are per channel, so the same slot may carry different access on another channel.","is_private":true,"provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001bipmi.user","title":"Accounts configured on the management controller","desc":"The account slots of the controller for the channel the current session runs over, with the username, enabled state, privilege limit and messaging flags of each slot.","min_provider_version":"13.0.29","provider":"go.mondoo.com/mql/providers/ipmi"},"watchdog":{"name":"watchdog","type":"\u001bipmi.watchdog","title":"IPMI watchdog timer","desc":"The watchdog timer of the baseboard management controller, which resets or powers off the host when software stops petting it. The timeoutAction field says what happens on expiry and dontLog whether that action is kept out of the system event log, which is how a forced reboot disappears from the audit trail.","provider":"go.mondoo.com/mql/providers/ipmi","is_implicit_resource":true}},"title":"Intelligent Platform Management Interface (IPMI)","desc":"Baseboard management controller (BMC) reachable over the IPMI protocol, the out-of-band interface for managing a server independently of its operating system. The deviceID field reports the controller's firmware revision, IPMI version, manufacturer, and product identity, and guid returns its globally unique identifier, together confirming which management firmware answers before an audit inspects chassis state.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/ipmi","root":true},"ipmi.channel":{"id":"ipmi.channel","name":"ipmi.channel","fields":{"accessMode":{"name":"accessMode","type":"\u0007","is_mandatory":true,"title":"Active access mode of the channel","desc":"The setting currently in effect, one of disabled, pre-boot-only, always-available, shared, or reserved. A LAN channel answers requests from the network only while this is always-available or shared.","provider":"go.mondoo.com/mql/providers/ipmi"},"activeSessionCount":{"name":"activeSessionCount","type":"\u0005","is_mandatory":true,"title":"Number of sessions currently active on the channel","provider":"go.mondoo.com/mql/providers/ipmi"},"alertingEnabled":{"name":"alertingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the channel may send platform event alerts","provider":"go.mondoo.com/mql/providers/ipmi"},"anonymousLoginEnabled":{"name":"anonymousLoginEnabled","type":"\u0004","is_mandatory":true,"title":"Whether a session with no username and no password is accepted","desc":"True when the controller has an enabled account whose username and password are both null, which grants access without any credential.","provider":"go.mondoo.com/mql/providers/ipmi"},"authTypes":{"name":"authTypes","type":"\u0019\u0007","is_mandatory":true,"title":"Authentication types accepted for administrator sessions","desc":"Any of none, md2, md5, password, and oem. An entry of none means the controller will accept a session that carries no authentication at all; md2 and md5 are the legacy IPMI 1.5 algorithms.","provider":"go.mondoo.com/mql/providers/ipmi"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Channel number, 0 to 15","provider":"go.mondoo.com/mql/providers/ipmi"},"kgConfigured":{"name":"kgConfigured","type":"\u0004","is_mandatory":true,"title":"Whether the RMCP+ key-generation key is set to a value other than the default","desc":"False means the key is left at the all-zero default, so the second key of the two-key login adds nothing.","provider":"go.mondoo.com/mql/providers/ipmi"},"mediumType":{"name":"mediumType","type":"\u0007","is_mandatory":true,"title":"Physical or logical medium the channel runs over","desc":"One of ipmb, icmb-v1.0, icmb-v0.9, 802.3-lan, serial-modem, other-lan, pci-smbus, smbus-v1.x, smbus-v2.0, usb-1.x, usb-2.x, system-interface, oem, or reserved.","provider":"go.mondoo.com/mql/providers/ipmi"},"nonNullUsernamesEnabled":{"name":"nonNullUsernamesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether an account with a username is enabled","provider":"go.mondoo.com/mql/providers/ipmi"},"nonVolatileAccessMode":{"name":"nonVolatileAccessMode","type":"\u0007","is_mandatory":true,"title":"Access mode persisted across a controller restart","desc":"The stored counterpart of accessMode. A channel that is disabled now but stored as always-available becomes reachable again after a reset.","provider":"go.mondoo.com/mql/providers/ipmi"},"nonVolatilePrivilegeLimit":{"name":"nonVolatilePrivilegeLimit","type":"\u0007","is_mandatory":true,"title":"Privilege ceiling persisted across a controller restart","desc":"The stored counterpart of privilegeLimit.","provider":"go.mondoo.com/mql/providers/ipmi"},"nullUsernamesEnabled":{"name":"nullUsernamesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether an account with no username is enabled","desc":"True when the controller has an enabled account with a null username and a non-null password.","provider":"go.mondoo.com/mql/providers/ipmi"},"perMessageAuthenticationEnabled":{"name":"perMessageAuthenticationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether each message in a session is authenticated","desc":"False means the controller accepts an authentication type of none for packets sent after the session has been established, so only the opening exchange is protected.","provider":"go.mondoo.com/mql/providers/ipmi"},"privilegeLimit":{"name":"privilegeLimit","type":"\u0007","is_mandatory":true,"title":"Highest privilege any session on the channel may reach","desc":"The active ceiling, one of unspecified, callback, user, operator, administrator, oem, no-access, or reserved. An account with a higher privilege limit is still held to this value on this channel.","provider":"go.mondoo.com/mql/providers/ipmi"},"protocolType":{"name":"protocolType","type":"\u0007","is_mandatory":true,"title":"Message protocol carried on the channel","desc":"One of ipmb-1.0, icmb-1.0, ipmi-smbus, kcs, smic, bt-10, bt-15, tmode, oem, or reserved.","provider":"go.mondoo.com/mql/providers/ipmi"},"sessionSupport":{"name":"sessionSupport","type":"\u0007","is_mandatory":true,"title":"Session model of the channel","desc":"One of session-less, single-session, multi-session, or session-based.","provider":"go.mondoo.com/mql/providers/ipmi"},"supportsIpmi15":{"name":"supportsIpmi15","type":"\u0004","is_mandatory":true,"title":"Whether the channel accepts IPMI v1.5 connections","provider":"go.mondoo.com/mql/providers/ipmi"},"supportsIpmi20":{"name":"supportsIpmi20","type":"\u0004","is_mandatory":true,"title":"Whether the channel accepts IPMI v2.0 connections","provider":"go.mondoo.com/mql/providers/ipmi"},"userLevelAuthenticationEnabled":{"name":"userLevelAuthenticationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether user-level commands are authenticated","desc":"False means the controller accepts an authentication type of none for commands issued at user privilege.","provider":"go.mondoo.com/mql/providers/ipmi"}},"title":"IPMI communication channel","desc":"One communication channel of the baseboard management controller. The mediumType field says whether the channel carries IPMI over 802.3 LAN, a serial connection or the local system interface, and accessMode says whether the channel is disabled, reachable only before the host boots, always available, or shared with a serial connection. The privilegeLimit field is the ceiling every session on the channel is held to regardless of the account used, and the remaining fields report the capabilities the controller advertises before any session exists: which authentication types it accepts for administrator sessions, and whether a login with no username, or with no username and no password, is accepted at all.","private":true,"min_provider_version":"13.0.29","defaults":"id mediumType accessMode privilegeLimit","provider":"go.mondoo.com/mql/providers/ipmi"},"ipmi.chassis":{"id":"ipmi.chassis","name":"ipmi.chassis","fields":{"status":{"name":"status","type":"\n","title":"Chassis power and fault status","desc":"Current state of the chassis and its main power subsystem. Keys: `systemPower` (main power on), the fault booleans `powerOverload`, `powerInterlock`, `mainPowerFault`, and `powerControlFault`, `powerRestorePolicy` (behavior after a power loss, one of always-off, previous, always-on, or unknown), `lastPowerEvent` (an object with the booleans ac-failed, overload, interlock, fault, and command), and the booleans `chassisIntrusion`, `frontPanelLockout`, `driveFault`, and `coolingFanFault`.","provider":"go.mondoo.com/mql/providers/ipmi"},"systemBootOptions":{"name":"systemBootOptions","type":"\n","title":"System boot device and BIOS boot-flag overrides","desc":"Configured boot options. Keys: `parameterVersion`, `parameterValidUnlocked`, and `bootFlags`, an object holding the boot-flag overrides. Within `bootFlags`: `bootDeviceSelector` (device forced for the next boot, one of none, pxe, disk, safe, diag, cdrom, bios, rfloppy, rprimary, rcdrom, rdisk, or floppy), `biosVerbosity` (default, quiet, verbose, or reserved), `consoleRedirection` (bios, skip, redirected, or reserved), `biosMuxControlOverride` (recommended, force-bmc, force-system, or reserved), and the boolean overrides `biosFlagsValid`, `applyToNextBootOnly`, `legacyBootType`, `cmosClear`, `lockKeyboard`, `screenBlank`, `lockOutResetButton`, `lockOutPowerButton`, `lockOutSleepButton`, `userPasswordBypass`, `forceProgressEventTrap`, and `biosSharedModeOverride`.","provider":"go.mondoo.com/mql/providers/ipmi"}},"title":"IPMI system chassis","desc":"Chassis-level power and physical state of a server reachable through its IPMI baseboard management controller. The status field reports whether main power is on, power fault and overload flags, chassis intrusion, front-panel lockout, and drive or cooling-fan faults, so an audit can confirm a host is powered and healthy out of band. The systemBootOptions field exposes the configured boot device and the BIOS boot-flag overrides.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/ipmi"},"ipmi.lanConfig":{"id":"ipmi.lanConfig","name":"ipmi.lanConfig","fields":{"attemptCountResetIntervalSeconds":{"name":"attemptCountResetIntervalSeconds","type":"\u0005","title":"Seconds after which the failed attempt counter is cleared","desc":"Zero means the counter is kept for as long as the controller stays powered.","provider":"go.mondoo.com/mql/providers/ipmi"},"authTypeEnables":{"name":"authTypeEnables","type":"\u001a\u0007\u0019\u0007","title":"Authentication types accepted, by privilege level","desc":"Keys are callback, user, operator, administrator, and oem. Each value lists any of none, md2, md5, password, and oem. An entry of none at a level means a session may reach that level without authenticating.","provider":"go.mondoo.com/mql/providers/ipmi"},"badPasswordThreshold":{"name":"badPasswordThreshold","type":"\u0005","title":"Failed password attempts before the account is disabled","desc":"Zero means no threshold is applied and password guessing is unbounded.","provider":"go.mondoo.com/mql/providers/ipmi"},"cipherSuitePrivilegeLevels":{"name":"cipherSuitePrivilegeLevels","type":"\u001a\u0007\u0007","title":"Highest privilege reachable with each cipher suite","desc":"Keys are cipher suite identifiers, values are one of unspecified, callback, user, operator, administrator, oem, no-access, or reserved. A value of unspecified means the suite is not in use.","provider":"go.mondoo.com/mql/providers/ipmi"},"cipherSuites":{"name":"cipherSuites","type":"\u0019\u0005","title":"RMCP+ cipher suite identifiers the channel offers","provider":"go.mondoo.com/mql/providers/ipmi"},"cipherZeroEnabled":{"name":"cipherZeroEnabled","type":"\u0004","title":"Whether cipher suite 0 can be used to open a session","desc":"Cipher suite 0 negotiates authentication and then performs none, so any password is accepted for a session at the privilege the suite is configured for. Null when the controller did not report both the cipher suite list and their privilege levels.","provider":"go.mondoo.com/mql/providers/ipmi"},"invalidPasswordEventEnabled":{"name":"invalidPasswordEventEnabled","type":"\u0004","title":"Whether crossing the threshold records an event","provider":"go.mondoo.com/mql/providers/ipmi"},"userLockoutIntervalSeconds":{"name":"userLockoutIntervalSeconds","type":"\u0005","title":"Seconds an account stays disabled after crossing the threshold","desc":"Zero means an account disabled by the threshold stays disabled until it is re-enabled by hand.","provider":"go.mondoo.com/mql/providers/ipmi"},"vlanEnabled":{"name":"vlanEnabled","type":"\u0004","title":"Whether the channel is tagged onto a VLAN","provider":"go.mondoo.com/mql/providers/ipmi"},"vlanId":{"name":"vlanId","type":"\u0005","title":"802.1q VLAN identifier configured on the channel","provider":"go.mondoo.com/mql/providers/ipmi"}},"title":"IPMI over LAN configuration","desc":"The network-facing configuration of the channel the current session runs over. The authTypeEnables field reports, per privilege level, which authentication types the controller will accept, so a level that lists none accepts unauthenticated sessions at that privilege. The cipher suite fields cover RMCP+ negotiation, where cipherZeroEnabled is the case in which authentication is negotiated and then not performed. The badPasswordThreshold, userLockoutIntervalSeconds and attemptCountResetIntervalSeconds fields are the only bound IPMI places on repeated password guessing. The SNMP community string parameter is credential material and is not read.","min_provider_version":"13.0.29","defaults":"cipherZeroEnabled badPasswordThreshold","provider":"go.mondoo.com/mql/providers/ipmi"},"ipmi.sel":{"id":"ipmi.sel","name":"ipmi.sel","fields":{"entryCount":{"name":"entryCount","type":"\u0005","title":"Number of entries currently in the log","provider":"go.mondoo.com/mql/providers/ipmi"},"freeSpaceBytes":{"name":"freeSpaceBytes","type":"\u0005","title":"Bytes still free in the log","provider":"go.mondoo.com/mql/providers/ipmi"},"lastAddTime":{"name":"lastAddTime","type":"\t","title":"When an entry was last added","desc":"Null when the controller reports the timestamp as unset, which is the answer for a log that has never been written to.","provider":"go.mondoo.com/mql/providers/ipmi"},"lastEraseTime":{"name":"lastEraseTime","type":"\t","title":"When the log was last erased","desc":"Null when the controller reports the timestamp as unset.","provider":"go.mondoo.com/mql/providers/ipmi"},"loggingEnabled":{"name":"loggingEnabled","type":"\u0004","title":"Whether the controller is recording events in the log","desc":"False means events are generated but not written, so intrusions and failed authentications leave no record.","provider":"go.mondoo.com/mql/providers/ipmi"},"overflow":{"name":"overflow","type":"\u0004","title":"Whether events have been dropped because the log is full","provider":"go.mondoo.com/mql/providers/ipmi"},"supportsDelete":{"name":"supportsDelete","type":"\u0004","title":"Whether the controller supports erasing the log","provider":"go.mondoo.com/mql/providers/ipmi"},"supportsGetAllocationInfo":{"name":"supportsGetAllocationInfo","type":"\u0004","title":"Whether the controller reports log allocation information","provider":"go.mondoo.com/mql/providers/ipmi"},"supportsPartialAdd":{"name":"supportsPartialAdd","type":"\u0004","title":"Whether the controller supports adding partial entries","provider":"go.mondoo.com/mql/providers/ipmi"},"supportsReserve":{"name":"supportsReserve","type":"\u0004","title":"Whether the controller supports reserving the log","provider":"go.mondoo.com/mql/providers/ipmi"},"version":{"name":"version","type":"\u0007","title":"System event log version reported by the controller","provider":"go.mondoo.com/mql/providers/ipmi"}},"title":"IPMI system event log","desc":"State of the system event log of the baseboard management controller, the record a server keeps of chassis intrusions, power events, sensor threshold crossings and failed authentications. The loggingEnabled field says whether the controller is writing to the log at all, entryCount how many records it currently holds, and lastAddTime when a record was last written, so an empty or stalled log on a long-running server is visible.","min_provider_version":"13.0.29","defaults":"entryCount loggingEnabled lastAddTime","provider":"go.mondoo.com/mql/providers/ipmi"},"ipmi.solConfig":{"id":"ipmi.solConfig","name":"ipmi.solConfig","fields":{"enabled":{"name":"enabled","type":"\u0004","title":"Whether the Serial-over-LAN payload is enabled on the channel","provider":"go.mondoo.com/mql/providers/ipmi"},"forceAuthentication":{"name":"forceAuthentication","type":"\u0004","title":"Whether the console payload must be authenticated","provider":"go.mondoo.com/mql/providers/ipmi"},"forceEncryption":{"name":"forceEncryption","type":"\u0004","title":"Whether the console payload must be encrypted","desc":"False sends the host serial console across the network in cleartext.","provider":"go.mondoo.com/mql/providers/ipmi"},"payloadPort":{"name":"payloadPort","type":"\u0005","title":"UDP port the console payload is carried on","provider":"go.mondoo.com/mql/providers/ipmi"},"privilegeLevel":{"name":"privilegeLevel","type":"\u0007","title":"Privilege a session needs to open the console","desc":"One of unspecified, callback, user, operator, administrator, oem, no-access, or reserved.","provider":"go.mondoo.com/mql/providers/ipmi"}},"title":"Serial-over-LAN configuration","desc":"The Serial-over-LAN settings of the channel the current session runs over. Serial-over-LAN delivers the host serial console across the network, so everything typed at a root prompt travels over it. The forceEncryption field decides whether that traffic is encrypted, forceAuthentication whether it is authenticated, and privilegeLevel the privilege a session must hold to open the console.","min_provider_version":"13.0.29","defaults":"enabled forceEncryption privilegeLevel","provider":"go.mondoo.com/mql/providers/ipmi"},"ipmi.user":{"id":"ipmi.user","name":"ipmi.user","fields":{"callbackOnly":{"name":"callbackOnly","type":"\u0004","is_mandatory":true,"title":"Whether the account is restricted to callback connections","provider":"go.mondoo.com/mql/providers/ipmi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the account is enabled","desc":"Null when the controller does not report the state, which is the answer from implementations older than IPMI 2.0 errata 3.","provider":"go.mondoo.com/mql/providers/ipmi"},"fixedName":{"name":"fixedName","type":"\u0004","is_mandatory":true,"title":"Whether the slot carries a name the controller will not let you change","provider":"go.mondoo.com/mql/providers/ipmi"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Slot number of the account, starting at 1","provider":"go.mondoo.com/mql/providers/ipmi"},"ipmiMessagingEnabled":{"name":"ipmiMessagingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the account may send IPMI messages on this channel","desc":"False leaves the account able to authenticate but unable to issue commands over the channel.","provider":"go.mondoo.com/mql/providers/ipmi"},"linkAuthenticationEnabled":{"name":"linkAuthenticationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the account may authenticate a link on this channel","provider":"go.mondoo.com/mql/providers/ipmi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Username configured in the slot","desc":"An empty string is a slot with no username set. Slot 1 is permanently reserved for the null user and is normally empty.","provider":"go.mondoo.com/mql/providers/ipmi"},"privilegeLimit":{"name":"privilegeLimit","type":"\u0007","is_mandatory":true,"title":"Highest privilege the account may reach on this channel","desc":"One of unspecified, callback, user, operator, administrator, oem, no-access, or reserved.","provider":"go.mondoo.com/mql/providers/ipmi"}},"title":"IPMI management controller account","desc":"One account slot of the baseboard management controller, as it applies to the channel the current session runs over. The name is empty when the slot has no username set, which combined with a privilegeLimit above callback is an account reachable without naming a user. The privilegeLimit, linkAuthenticationEnabled, ipmiMessagingEnabled and callbackOnly fields are per channel, so the same slot may carry different access on another channel.","private":true,"min_provider_version":"13.0.29","defaults":"id name privilegeLimit enabled","provider":"go.mondoo.com/mql/providers/ipmi"},"ipmi.watchdog":{"id":"ipmi.watchdog","name":"ipmi.watchdog","fields":{"dontLog":{"name":"dontLog","type":"\u0004","title":"Whether expiry of the timer is kept out of the system event log","desc":"True suppresses the event, so a watchdog-triggered reset leaves no record behind.","provider":"go.mondoo.com/mql/providers/ipmi"},"expiredTimerUses":{"name":"expiredTimerUses","type":"\u0019\u0007","title":"Timer uses whose expiry the controller still has recorded","desc":"Any of bios-frb2, bios-post, os-load, sms-os, and oem.","provider":"go.mondoo.com/mql/providers/ipmi"},"initialCountdownSeconds":{"name":"initialCountdownSeconds","type":"\u0006","title":"Countdown the timer was loaded with, in seconds","provider":"go.mondoo.com/mql/providers/ipmi"},"preTimeoutInterrupt":{"name":"preTimeoutInterrupt","type":"\u0007","title":"Interrupt raised before the timer expires","desc":"One of none, smi, nmi, messaging, or reserved.","provider":"go.mondoo.com/mql/providers/ipmi"},"preTimeoutIntervalSeconds":{"name":"preTimeoutIntervalSeconds","type":"\u0005","title":"Seconds before expiry at which the pre-timeout interrupt is raised","provider":"go.mondoo.com/mql/providers/ipmi"},"presentCountdownSeconds":{"name":"presentCountdownSeconds","type":"\u0006","title":"Countdown remaining, in seconds","provider":"go.mondoo.com/mql/providers/ipmi"},"running":{"name":"running","type":"\u0004","title":"Whether the timer is currently counting down","provider":"go.mondoo.com/mql/providers/ipmi"},"timeoutAction":{"name":"timeoutAction","type":"\u0007","title":"What the controller does when the timer expires","desc":"One of none, hard-reset, power-down, power-cycle, or reserved.","provider":"go.mondoo.com/mql/providers/ipmi"},"timerUse":{"name":"timerUse","type":"\u0007","title":"Software the timer is currently allocated to","desc":"One of bios-frb2, bios-post, os-load, sms-os, oem, or reserved.","provider":"go.mondoo.com/mql/providers/ipmi"}},"title":"IPMI watchdog timer","desc":"The watchdog timer of the baseboard management controller, which resets or powers off the host when software stops petting it. The timeoutAction field says what happens on expiry and dontLog whether that action is kept out of the system event log, which is how a forced reboot disappears from the audit trail.","min_provider_version":"13.0.29","defaults":"running timerUse timeoutAction dontLog","provider":"go.mondoo.com/mql/providers/ipmi"}},"dependencies":{"core":{"id":"go.mondoo.com/mql/providers/core","name":"core"}},"provider_roots":{"go.mondoo.com/mql/providers/ipmi":"ipmi"}}