Tables

Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.

Apple

wmi_event_filters

Lists WMI event filters.

Column	Type	Description
class	text	The name of the class.
name	text	Unique identifier of an event filter.
query	text	Windows Management Instrumentation Query Language (WQL) event query that specifies the set of events for consumer notification, and the specific conditions for notification.
query_language	text	Query language that the query is written in.
relative_path	text	Relative path to the class or instance.