Solutions
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Infrastructure as code
See every change, undo any error, repeat every success.
Extend Fleet
Integrate your favorite tools with Fleet.
Customers
Pricing
More
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Infrastructure as code
See every change, undo any error, repeat every success.
Extend Fleet
Integrate your favorite tools with Fleet.
Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
last
last
System logins and logouts.
| Column | Type | Description |
|---|---|---|
| host | text | Entry hostname |
| pid | integer | Process (or thread) ID |
| time | integer | Entry timestamp |
| tty | text | Entry terminal |
| type | integer | Entry type, according to ut_type types (utmp.h) |
| type_name | text | Entry type name, according to ut_type types (utmp.h) |
| username | text | Entry username |
Example
System logins and logouts with formatted time.
SELECT strftime('%Y-%m-%d %H:%M:%S',time,'unixepoch') AS formatted_time, username, pid, type FROM last WHERE tty='console'; Questions?
SOC2 Type 2
