Tables

Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.

Apple

Linux

Windows

ChromeOS

md_devices

Software RAID array settings.

Column	Type	Description
active_disks	integer	Number of active disks in array
bitmap_chunk_size	text	Bitmap chunk size
bitmap_external_file	text	External referenced bitmap file
bitmap_on_mem	text	Pages allocated in in-memory bitmap, if enabled
check_array_finish	text	Estimated duration of the check array activity
check_array_progress	text	Progress of the check array activity
check_array_speed	text	Speed of the check array activity
chunk_size	bigint	chunk size in bytes
device_name	text	md device name
failed_disks	integer	Number of failed disks in array
nr_raid_disks	integer	Number of partitions or disk devices to comprise the array
other	text	Other information associated with array from /proc/mdstat
raid_disks	integer	Number of configured RAID disks in array
raid_level	integer	Current raid level of the array
recovery_finish	text	Estimated duration of recovery activity
recovery_progress	text	Progress of the recovery activity
recovery_speed	text	Speed of recovery activity
reshape_finish	text	Estimated duration of reshape activity
reshape_progress	text	Progress of the reshape activity
reshape_speed	text	Speed of reshape activity
resync_finish	text	Estimated duration of resync activity
resync_progress	text	Progress of the resync activity
resync_speed	text	Speed of resync activity
size	bigint	size of the array in blocks
spare_disks	integer	Number of idle disks in array
status	text	Current state of the array
superblock_state	text	State of the superblock
superblock_update_time	bigint	Unix timestamp of last update
superblock_version	text	Version of the superblock
unused_devices	text	Unused devices
working_disks	integer	Number of working disks in array