@aleksmaus - this looks good, but one question: it looks like the Type column now has 2 entries for most fields. For example, keyword, text.text. Is that intentional? Previously, almost all of them were just keyword.

Ex:

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

@aleksmaus - this looks good, but one question: it looks like the Type column now has 2 entries for most fields. For example, keyword, text.text. Is that intentional? Previously, almost all of them were just keyword.

Ex:

The previous README.MD didn't capture that the fields were multi-fields as defined in osquery.yml for the actual Elasticsearch mapping.

While testing with kibana stumbled upon issue, the line breaks are sanitized and not rendered correctly.

None of the other approaches with markdown worked, it's either didn't render README.md in github correctly or was not rendering with kibana.

Updated to the multi-line cells that looks like this with kibana

And markdown README.md renders sufficiently ok

That looks great @aleksmaus - it's very readable.