Hello, when I am running distributed query on Fleet UI it completes and says some of the hosts failed. What does that exactly mean ? Is it possible to identify which hosts have failed ? Thanks

This means that osquery returned an error status for the query. Since we implemented live query more information is returned from osquery and this is a good reminder that we need to expose that info.

Yeah I’ve had some of my users ask about that. It’s not clear what (if anything) they can do to debug what happened when some hosts just fail to return anything.

Thanks for the interest, everyone. We are planning on addressing this in the next few weeks.

Great!

Not sure if folks have seen but this is exposed now in 3.7.1

oh nice