Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
running_apps
macOS applications currently running on the host system.
Column | Type | Description |
---|---|---|
bundle_identifier | text | The bundle identifier of the application |
is_active | integer | (DEPRECATED) Not returned in SELECT * FROM running_apps . |
pid | integer | The pid of the application |
List all running applications. Filter on is_active='1' to see the application that currently has focus.
SELECT * FROM running_apps;