Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
osquery_packs
osquery_packs
Information about the current query packs that are loaded in osquery.
| Column | Type | Description |
|---|---|---|
| active | integer | Whether this pack is active (the version, platform and discovery queries match) yes=1, no=0. |
| discovery_cache_hits | integer | The number of times that the discovery query used cached values since the last time the config was reloaded |
| discovery_executions | integer | The number of times that the discovery queries have been executed since the last time the config was reloaded |
| name | text | The given name for this query pack |
| platform | text | Platforms this query is supported on |
| shard | integer | Shard restriction limit, 1-100, 0 meaning no restriction |
| version | text | Minimum osquery version that this query will run on |
Example
See query packs currently active on osquery.
SELECT name FROM osquery_packs WHERE active='1';
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
