Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

I want to get last seen of host  with dbconnect, and I cant find that field, does someone know where is stored?

`host_seen_times` is a table in the database.

Easy one to miss :slightly_smiling_face: Just to add a little flavor, `host_seen_times.seen_time` is updated every time a host communicates with the Fleet server for any reason.

<https://github.com/fleetdm/fleet/blob/7067ca586a4aa1a0377b387d4b4478a5958193ff/server/datastore/mysql/schema.sql#L358C4-L358C13>

As a side note, I'd recommend pulling information through the API rather than from the database directly. We make frequent changes to the database structure but the API generally stays static (and we make some noise when things change there).