Hi, I've an issue with software inventory on Linux hosts. Querying the installed packages via a query in Fleet works. However, the software inventory stays blank for Linux hosts. Windows endpoints report their software inventory. This is a fresh Fleet installation, version 4.57.3. I'm not sure were to start to investigate the issue. Any help appreciated. Thanks.

Hey @tokcum which table are you using for your queries? And which Linux distro are you targeting?

I've found the issue. The table chrome_extensions is part of the software inventory query used by Fleet. I've found this in queries.go in the source code. This table was disabled in our environment, so fleet's SQL statement broke. I've found this by starting osqueryd with --verbose and checking the logs. @Allen Houchins thank you. Your question pointed also in this direction. Unfortunately, fleet does not bring such issues to the Fleet UI users attention.

Glad to hear you are back on track. Thanks for following up on that and the feedback regarding Fleet UI.