Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
wmi_filter_consumer_binding
Lists the relationship between event consumers and filters.
Column | Type | Description |
---|---|---|
class | text | The name of the class. |
consumer | text | Reference to an instance of __EventConsumer that represents the object path to a logical consumer, the recipient of an event. |
filter | text | Reference to an instance of __EventFilter that represents the object path to an event filter which is a query that specifies the type of event to be received. |
relative_path | text | Relative path to the class or instance. |
select * from wmi_filter_consumer_binding