Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
osquery_extensions
List of active osquery extensions.
Column | Type | Description |
---|---|---|
name | text | Extension's name |
path | text | Path of the extension's Thrift connection or library path |
sdk_version | text | osquery SDK version used to build the extension |
type | text | SDK extension type: core, extension, or module |
uuid | bigint | The transient ID assigned for communication |
version | text | Extension's version |
Identify osquery extensions in use that are not part of osquery core.
SELECT name, path from osquery_extensions WHERE type IS NOT 'core';