Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
osquery_flags
Configurable flags that modify osquery's behavior.
Column | Type | Description |
---|---|---|
default_value | text | Flag default value |
description | text | Flag description |
name | text | Flag name |
shell_only | integer | Is the flag shell only? |
type | text | Flag type |
value | text | Flag value |
If disable_events has a value of false, events are enabled.
SELECT description, name, value FROM osquery_flags WHERE name='disable_events';