Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
mdm_bridge
Allows querying MDM enrolled devices using "get" commands.
Column | Type | Description |
---|---|---|
enrolled_user | text | Contains the enrollment URI of the device. |
enrollment_status | text | Contains the enrollment status of the device, possible values are "device_enrolled" and "device_unenrolled". |
mdm_command_input | text | The "get" command to execute on the device. If empty, no command is executed and the "enrollment_status" and "enrolled_user" columns are returned. |
mdm_command_output | text | Value of the "Results" field of the MDM command output. |
raw_mdm_command_output | text | The full raw output of the MDM command execution. |
This table is not a core osquery table. It is included as part of Fleet's agent (fleetd). This table does not work on Windows Server