Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hi, we’re seeing the windows agent service becoming ‘un-start-able’ over time, we started out with around 160 machines a few weeks ago, and are down to 60 working now. Theres nothing obvious in the logs, but have not tried any debug steps so far. What debug steps should we be following?

Linux agents are seemingly unaffected by the plague :microbe:

Hi <@U065W6LBD6C>, some debugging definitely seems to be in order! I would start <https://fleetdm.com/guides/fleetctl#debugging-fleet:~:text=the%20default%20profile.-,Debugging%20Fleet,-fleetctl%20provides%20debugging|here> and use some `fleetctl debug` commands.

What version of Fleet are you running?