Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
crashes
crashes
Application, System, and Mobile App crash logs.
| Column | Type | Description |
|---|---|---|
| crash_path | text | Location of log file |
| crashed_thread | bigint | Thread ID which crashed |
| datetime | text | Date/Time at which the crash occurred |
| exception_codes | text | Exception codes from the crash |
| exception_notes | text | Exception notes from the crash |
| exception_type | text | Exception type of the crash |
| identifier | text | Identifier of the crashed process |
| parent | bigint | Parent PID of the crashed process |
| path | text | Path to the crashed process |
| pid | bigint | Process (or thread) ID of the crashed process |
| registers | text | The value of the system registers |
| responsible | text | Process responsible for the crashed process |
| stack_trace | text | Most recent frame from the stack trace |
| type | text | Type of crash log |
| uid | integer | User ID of the crashed process |
| version | text | Version info of the crashed process |
Example
SELECT * FROM users CROSS JOIN crashes USING (uid);Notes
Querying this table requires joining against the users table. Learn more
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
