Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
logical_drives
Details for logical drives on the system. A logical drive generally represents a single partition.
Column | Type | Description |
---|---|---|
boot_partition | integer | True if Windows booted from this drive. |
description | text | The canonical description of the drive, e.g. 'Logical Fixed Disk', 'CD-ROM Disk'. |
device_id | text | The drive id, usually the drive name, e.g., 'C:'. |
file_system | text | The file system of the drive. |
free_space | bigint | The amount of free space, in bytes, of the drive (-1 on failure). |
size | bigint | The total amount of space, in bytes, of the drive (-1 on failure). |
type | text | Deprecated (always 'Unknown'). |
select free_space from logical_drives where device_id = 'C:'