Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
virtual_memory_info
Darwin Virtual Memory statistics.
Column | Type | Description |
---|---|---|
active | bigint | Total number of active pages. |
anonymous | bigint | Total number of anonymous pages. |
compressed | bigint | The total number of pages that have been compressed by the VM compressor. |
compressor | bigint | The number of pages used to store compressed VM pages. |
copy | bigint | Total number of copy-on-write pages. |
decompressed | bigint | The total number of pages that have been decompressed by the VM compressor. |
faults | bigint | Total number of calls to vm_faults. |
file_backed | bigint | Total number of file backed pages. |
free | bigint | Total number of free pages. |
inactive | bigint | Total number of inactive pages. |
page_ins | bigint | The total number of requests for pages from a pager. |
page_outs | bigint | Total number of pages paged out. |
purgeable | bigint | Total number of purgeable pages. |
purged | bigint | Total number of purged pages. |
reactivated | bigint | Total number of reactivated pages. |
speculative | bigint | Total number of speculative pages. |
swap_ins | bigint | The total number of compressed pages that have been swapped out to disk. |
swap_outs | bigint | The total number of compressed pages that have been swapped back in from disk. |
throttled | bigint | Total number of throttled pages. |
uncompressed | bigint | Total number of uncompressed pages. |
wired | bigint | Total number of wired down pages. |
zero_fill | bigint | Total number of zero filled pages. |
Identify systems where memory swapping is occuring. These systems might benefit from more RAM.
SELECT * FROM virtual_memory_info WHERE swap_ins>'0';