Any suggestions on getting some/all of the (Window...
# fleet
a
Any suggestions on getting some/all of the (Windows) powercfg /sleephistory data into Fleet? I have osquery running on the Windows laptop but the PowerShell script that ChatGPT gave me is not helpful and obviously powercfg's native output is an HTML file with supporting graphics that I don't think I can return to Fleet.
k
Hi @A p u. Would the info you're looking for show up in event logs? https://fleetdm.com/tables/windows_eventlog
a
Possibly. Probably. But it would require a lot of parsing. https://fleetdm.com/guides/battery-health gives us some of the data but see https://learn.microsoft.com/en-us/shows/defrag-tools/181-system-power-report for how much more is available. It would be great if I could Run Script and have a PowerShell script that ran the command, ZIPped all the data and then Fleet was able transfer that file back to the monitoring server.
b
Hi @A p u you actually can use what is called Automatic Table Construction for something like this: https://osquery.readthedocs.io/en/stable/deployment/configuration/#automatic-table-construction https://github.com/allenhouchins/fleet-stuff/tree/main/linux-mdm-snap-packages https://www.linkedin.com/pulse/from-data-gaps-actions-auto-table-construction-atc-fleet-houchins-l9kqc/?trackingId=N1Hg17Roic3Y61%2BouNLLYA%3D%3D In your case, you could write out the data from the system power report as a SQLite database. Then, you would create the ATC schema for that custom .db file in your Fleet config. If you have questions about this ask away! Thanks.