Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
authorized_keys
A line-delimited authorized_keys table.
Column | Type | Description |
---|---|---|
algorithm | text | Key type |
comment | text | Optional comment |
key | text | Key encoded as base64 |
key_file | text | Path to the authorized_keys file |
options | text | Optional list of login options |
pid_with_namespace | integer | Pids that contain a namespace Only available on Linux |
uid | bigint | The local owner of authorized_keys file |
SELECT * FROM users CROSS JOIN authorized_keys USING (uid);
Querying this table requires joining against the users
table. Learn more