Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
puppet_state
puppet_state
State of every resource Puppet is managing. This table uses data from the last_run_report that Puppet creates.
| Column | Type | Description |
|---|---|---|
| change_count | text | The count of changes to be performed. |
| changed | text | If change_count is above 0, this is true. |
| corrective_change | text | True if a change on the system caused unexpected changes between two Puppet runs. |
| evaluation_time | text | The amount of seconds it took to evaluate the resource. |
| failed | text | If Puppet failed to evaluate this resource, this column is true. |
| file | text | The file that contains the resource. |
| line | text | The line on which the resource is specified. |
| out_of_sync | text | If out_of_sync_count is above 0, this is true. |
| out_of_sync_count | text | The number of properties that are out of sync |
| resource | text | The resource and its title as Type[title]. |
| resource_type | text | The resource type. |
| skipped | text | True if this resource was skipped. |
| title | text | The name of the resource. |
Example
List resources that failed or took over a minute to evaluate.
SELECT * FROM puppet_state WHERE failed='true' OR evaluation_time|-'60';Notes
This table is from the Mac Admins osquery extension.
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
