Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
os_version
A single row containing the operating system name and version.
Column | Type | Description |
---|---|---|
arch | text | OS Architecture |
build | text | Optional build-specific or variant string |
codename | text | OS version codename |
extra | text | Optional extra release specification Only available on darwin |
install_date | bigint | The install date of the OS. Only available on Windows |
major | integer | Major release version |
minor | integer | Minor release version |
mount_namespace_id | text | Mount namespace id Only available on Linux |
name | text | Distribution or product name |
patch | integer | Optional patch release |
pid_with_namespace | integer | Pids that contain a namespace Only available on Linux |
platform | text | OS Platform or ID |
platform_like | text | Closely related platforms |
revision | integer | Update Build Revision, refers to the specific revision number of a Windows update Not returned in SELECT * FROM os_version .Only available on windows, win32, and cygwin |
version | text | Pretty, suitable for presentation, OS version |
See the OS version as well as the CPU architecture in use (X86 vs ARM for example)
SELECT arch, version FROM os_version;