Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
uptime
Track time passed since last boot. Some systems track this as calendar time, some as runtime.
Column | Type | Description |
---|---|---|
days | integer | Days of uptime |
hours | integer | Hours of uptime |
minutes | integer | Minutes of uptime |
seconds | integer | Seconds of uptime |
total_seconds | bigint | Total uptime seconds |
See how long hosts that have been up for more than a month have been up. This could indicate systems that are not ephemeral as expected, or not being patched as frequently as they should be.
SELECT days FROM uptime WHERE days >='31'