Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
docker_container_stats
docker_container_stats
Docker container statistics. Queries on this table take at least one second.
| Column | Type | Description |
|---|---|---|
| cpu_kernelmode_usage | bigint | CPU kernel mode usage |
| cpu_total_usage | bigint | Total CPU usage |
| cpu_usermode_usage | bigint | CPU user mode usage |
| disk_read | bigint | Total disk read bytes |
| disk_write | bigint | Total disk write bytes |
| id | text | Container ID Required in WHERE clause |
| interval | bigint | Difference between read and preread in nano-seconds |
| memory_cached | bigint | Memory cached |
| memory_inactive_file | bigint | Memory inactive file |
| memory_limit | bigint | Memory limit |
| memory_max_usage | bigint | Memory maximum usage |
| memory_total_inactive_file | bigint | Memory total inactive file |
| memory_usage | bigint | Memory usage |
| name | text | Container name |
| network_rx_bytes | bigint | Total network bytes read |
| network_tx_bytes | bigint | Total network bytes transmitted |
| num_procs | integer | Number of processors |
| online_cpus | integer | Online CPUs |
| pids | integer | Number of processes |
| pre_cpu_kernelmode_usage | bigint | Last read CPU kernel mode usage |
| pre_cpu_total_usage | bigint | Last read total CPU usage |
| pre_cpu_usermode_usage | bigint | Last read CPU user mode usage |
| pre_online_cpus | integer | Last read online CPUs |
| pre_system_cpu_usage | bigint | Last read CPU system usage |
| preread | bigint | UNIX time when stats were last read |
| read | bigint | UNIX time when stats were read |
| system_cpu_usage | bigint | CPU system usage |
Example
select * from docker_container_stats where id = 'de8cfdc74c850967fd3832e128f4d12e2d5476a4aea282734bfb7e57f66fce2f'
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
