[osquerybeat] Add elastic_browser_history spec

changelog/fragments/1770600000-osquery-extension-gentables-and-elastic-browser-history.yaml

@@ -0,0 +1,3 @@
+kind: enhancement
+summary: Gentables improvements and elastic_browser_history spec with registry integration
+component: osquerybeat

x-pack/osquerybeat/ext/osquery-extension/README.md

@@ -25,7 +25,7 @@ The extension adds several custom tables to osquery that provide:
 
 Each table has detailed documentation in its own file:
 
-### 1. [elastic_browser_history](docs/elastic_browser_history.md)
+### 1. [elastic_browser_history](docs/tables/elastic_browser_history.md)
 Query browser history from multiple browsers (Chrome, Edge, Firefox, Safari) with unified schema and advanced filtering capabilities.
 
 **Platforms**: Linux, macOS, Windows

x-pack/osquerybeat/ext/osquery-extension/cmd/gentables/examples/README.md

@@ -329,7 +329,7 @@ This allows you to write minimal specs for cross-platform tables/views without r
 - ✅ `description` - Brief description
 - ✅ `columns` - At least one column with:
   - ✅ `name` - Column name
-  - ✅ `type` - Column type (TEXT, INTEGER, BIGINT, DOUBLE)
+  - ✅ `type` - Column type (TEXT, INTEGER, BIGINT, DOUBLE, BOOLEAN)
   - ✅ `description` - Column description
 - ✅ `documentation.description` - Detailed description
 - ✅ `documentation.examples` - At least one example query

x-pack/osquerybeat/ext/osquery-extension/cmd/gentables/main.go

@@ -817,6 +817,8 @@ func osqueryTypeToGoType(col columnSpec) string {
 		return "int64"
 	case "DOUBLE":
 		return "float64"
+	case "BOOLEAN", "BOOL":
+		return "bool"
 	default:
 		return "string" // Default fallback
 	}