Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

<https://github.com/jmpsec/osctrl/pull/916|#916 Adds node uptime as posture-derived metadata in node view>
Pull request opened by <https://github.com/javuto|javuto>
*Summary*

Adds node uptime as posture-derived metadata and displays it in the node detail view when posture is enabled.

*Changes*

*Backend*

• Added optional `uptime` metadata to the node API view.
• Populates node uptime from the latest `osctrl:posture:uptime` posture result.
• Added single-node and batched uptime lookup helpers for posture data.
• Keeps uptime enrichment fail-soft:  
   • omitted when posture is disabled  
   • omitted when no uptime posture record exists  
   • logs and omits on optional posture enrichment errors

*Posture Profiles*

• Added an `uptime` posture check to all built-in posture profiles.
• Query added:

SELECT days, hours, minutes, seconds, total_seconds FROM uptime
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>

<https://github.com/jmpsec/osctrl/pull/916|#916 Adds node uptime as posture-derived metadata in node view>
Pull request merged by <https://github.com/javuto|javuto>
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>