Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
kernel_panics
kernel_panics
System kernel panic logs.
| Column | Type | Description |
|---|---|---|
| dependencies | text | Module dependencies existing in crashed module's backtrace |
| frame_backtrace | text | Backtrace of the crashed module |
| kernel_version | text | Version of the system kernel |
| last_loaded | text | Last loaded module before panic |
| last_unloaded | text | Last unloaded module before panic |
| module_backtrace | text | Modules appearing in the crashed module's backtrace |
| name | text | Process name corresponding to crashed thread |
| os_version | text | Version of the operating system |
| path | text | Location of log file |
| registers | text | A space delimited line of register:value pairs |
| system_model | text | Physical system model, for example 'MacBookPro12,1 (Mac-E43C1C25D4880AD6)' |
| time | text | Formatted time of the event |
| uptime | bigint | System uptime at kernel panic in nanoseconds |
Example
Look for kernel panics and see which module was last loaded before they happened.
SELECT os_version, name, time, system_model, last_loaded FROM kernel_panics;
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
