Tables

Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.

Apple

Linux

Windows

ChromeOS

cpu_info

The cpu_info table expresses the data made available from a computer or mobile device by its Central Processing Unit (CPU).

Column	Type	Description
address_width	text	The width of the CPU address bus.
availability	text	The availability and status of the CPU. *Not returned in `SELECT FROM cpu_info`. Only available on Windows**
cpu_status	integer	The current operating status of the CPU.
current_clock_speed	integer	The current frequency of the CPU.
device_id	text	The DeviceID of the CPU.
load_percentage	integer	The current percentage of utilization of the CPU. *Not returned in `SELECT FROM cpu_info`. Only available on Windows**
logical_processors	integer	The number of logical processors of the CPU.
manufacturer	text	The manufacturer of the CPU.
max_clock_speed	integer	The maximum possible frequency of the CPU.
model	text	The model of the CPU.
number_of_cores	text	The number of cores of the CPU.
number_of_efficiency_cores	integer	The number of efficiency cores of the CPU. Only available on Apple Silicon Only available on macOS
number_of_performance_cores	integer	The number of performance cores of the CPU. Only available on Apple Silicon Only available on macOS
processor_type	text	The processor type, such as Central, Math, or Video.
socket_designation	text	The assigned socket on the board for the given CPU.

Example

Basic query:

SELECT * FROM cpu_info;

Notes

The cpu_info table is a good example of the cross-platform capabilities of osquery. It can be used on Linux, Mac and Windows hardware.

As seen in the schema table above, there are differences in CPU metadata made available across different platforms. These differences arise from various hardware manufacturers and operating systems not necessarily being held to an industry-wide, agreed-upon standard or protocol for CPU data.

Edit page