Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
osquery_events
osquery_events
Information about the event publishers and subscribers.
| Column | Type | Description |
|---|---|---|
| active | integer | 1 if the publisher or subscriber is active else 0 |
| events | integer | Number of events emitted or received since osquery started |
| name | text | Event publisher or subscriber name |
| publisher | text | Name of the associated publisher |
| refreshes | integer | Publisher only: number of runloop restarts |
| subscriptions | integer | Number of subscriptions the publisher received or subscriber used |
| type | text | Either publisher or subscriber |
Example
Identify osquery event types which have no subscriber.
SELECT * from osquery_events WHERE subscriptions='0';
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
