Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

and how can i see the detail_query that fleet is using the give data about the hosts?

You can see those queries <https://fleetdm.com/docs/using-fleet/understanding-host-vitals#understanding-host-vitals|here>.

but i don't see there the MAC query or IP query

when i updated my fleet version the MAC and IP field is empty at the agents so i want to understand how does fleet get that data

checkout the `network_interface_` queries <@U03FYJDVAHW> on the page <@U02KY9FDA59> linked. Can run those as live queries to see if get expected data back

<https://fleetdm.com/docs/using-fleet/understanding-host-vitals#network-interface-chrome>

where can i find oldest version of that query? so i can override it back to the query that works for me

<https://github.com/fleetdm/fleet/pull/9884|This PR > may be the one with the changes you’re looking for. 

If not, I’d either look at the `git blame` to track back changes or look at the code at the last version that worked for you. 

i see that at the source code it network_interface_query and at the docs its network_interface_windows or unix so how should i override it with waht name?