Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

hey everyone, I want to write a query on windows device that can show me the percentage of processes in CPU , dose someone have any query to recommend on?

I'm not quite sure what you're asking for. There's only a handful of percent columns on <https://osquery.io/schema/4.8.0/#processes> so maybe a quick command+f might help?

This could be better answered in either <#C08V7KTJB|general> or in <#C0F2H1A1L|sql>

<@U01RZ42M11R> so this is actually a tough problem with osquery. I’ve built a query that shows me what % of CPU cycles have been consumed by a process since booting, but not a realtime snapshot like “at 11:30 slack was using 15%”

this is the query: <https://github.com/palantir/osquery-configuration/blob/master/Classic/Endpoints/packs/performance-metrics.conf#L16-L21>

so if you use “slack” as an example and it returns `18`, it means since booting slack has used up 18% of all CPU cycles

can you send it anyway ?
until now i did a query that show only how much ram is used