Hi team, quick question about this query

select * from rpm_packages;

, we have this query scheduled to run every 6 hours. But it seems that in the logs most of the hosts are not being reported. But when we run the query manually in the fleetdm console, all the results come up as expected. Any reasons for this?

HI @Darshal Shah! Are you seeing any errors in the Fleet logs?

yes! Here is a part of that @Kathy Satterlee

"unixTime":"1704710358","severity":"1","filename":"config.cpp","line":"326","message":"Scheduled query may have failed: pack/Global/rpm_packages","version":"5.9.1","decorations"

That would be the Fleet software inventory query, as long as the Fleet inventory is good, it may have been a temporary glitch, are you seeing a lot of those? Can you check on your query in the osquery_schedule table to see if there's anything interesting there?

SELECT * from osquery_schedule WHERE query LIKE "select * from rpm_packages"

I ran that query @Kathy Satterlee, and it came back with no results:

Your live query returned no results.

It sounds like that query isn't scheduled. Can you confirm that the query has a frequency and that automations are enabled for that query?

Hi @Kathy Satterlee the query is scheduled

What version of Fleet are you running?

4.28