Meta pixel
search

A menu icon Tables {{numberOfTablesDisplayed}}

right chevron down chevron

Tables{{numberOfTablesDisplayed}}

macOS logo Windows logo Linux logo macOS logo

dscl

Returns the output of the dscl . -read command (local domain).

Column Type Description
command text The dscl command to execute, only "read" is currently supported.
Required in WHERE clause
key text The key to query on the read command and path.
Required in WHERE clause
path text The path to use in the read command.
Required in WHERE clause
value text The value of the read path and key. The value is the empty string if the key doesn't exist.

Notes

This table is not a core osquery table. It is included as part of Fleetd, the osquery manager from Fleet. Fleetd can be built with fleetctl.