Hey Folks https://gist.github.com/daguy666/dcf4f047223810692b353052682aa12e Not sure if the path for this is still valid to check to see if osqueryd is installed ( currently use orbit to deploy the fleetdm agent) /opt/orbit/bin/osqueryd/macos-app/stable/osquery.app/Contents/MacOS/osqueryd I see for some computers we have in our Org - this path doesn’t show it as installed. Is there another/other paths we should be paying attention to for MacOS? also windows =] adding @Jiayu Chang for visibility.

Hey @frederick ferby, This is somewhat of a chicken-and-egg situation. The hosts will only enroll and report to Fleet if fleetd/osquery are running in the first place. At least from Fleet would check if you're getting data returned from a query or setting up a policy with something like `SELECT * FROM osquery_info;`(the detail queries will have for "online" in Fleet). Could also run a

SELECT path, cmdline FROM processes WHERE name like '%osquery%';

on your endpoints to check if there are other paths possibly. The path you mention for MacOS is the one that Orbit checks to make sure things are running correctly. For Windows, believe is at

C:\Program Files\Orbit\bin\osqueryd\windows\stable\osqueryd.exe