Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
orbit_info
Returns information about the orbit instance.
Column | Type | Description |
---|---|---|
desktop_channel | text | The Update Framework update channel used for the Fleet Desktop executable. |
desktop_version | text | The version of the fleet-desktop instance. Blank if fleet-desktop is not installed. |
device_auth_token | text | Current Fleet Desktop token in the instance. |
enrolled | text | Returns whether the Orbit instance is enrolled to Fleet (true/false). |
last_recorded_error | text | Last recorded error in Orbit. |
orbit_channel | text | The Update Framework update channel used for the orbit executable. |
osqueryd_channel | text | The Update Framework update channel used for the osqueryd executable. |
scripts_enabled | integer | 1 if running scripts is enabled, 0 if disabled. |
update_url | text | The Update Framework server URL. |
uptime | bigint | Uptime of the orbit process in seconds. |
version | text | Version of the orbit instance. |
This table is not a core osquery table. It is included as part of Fleet's agent (fleetd).