Tables

Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.

Apple

Linux

Windows

ChromeOS

system_profiler

The system_profiler osquery table collects data from the macOS system_profiler binary.

Column	Type	Description
data_type	text	The system profiler data type (e.g., SPHardwareDataType) Required in `WHERE` clause
value	text	A JSON representation of the full result dictionary for the data type

Example

Collect Mac Activation Lock Status:

SELECT json_extract (value,'$.activation_lock_status')
FROM system_profiler
WHERE data_type='SPHardwareDataType';

Collect Mac Hardware UUID (platform_uuid):

SELECT json_extract (value,'$.platform_UUID')
FROM system_profiler
WHERE data_type='SPHardwareDataType';

Collect Mac Serial Number:

SELECT json_extract (value,'$.serial_number')
FROM system_profiler
WHERE data_type='SPHardwareDataType';

Notes

The macOS system_profiler binary reports on the hardware and software configuration of a Mac. It generates detailed, plain text, XML or json reports which can be exported from the Terminal or generated as .spx files and read by the macOS System Information.app based on "data types".

The system_profiler output is a rich source of data containing unique, per device hardware and software attributes which have many uses for enhancing Mac management.

Not all System Profiler data types are available via the system_profiler osquery table. Some data types are legacy & others are OS version-specific.

The following data types are available from the system_profiler binary as of macOS 26: