https://github.com/osquery/osquery logo
Title
a

Artem

06/29/2020, 10:37 AM
Hi everyone! Thanks for the development and support of the Fleet, I will also be grateful if someone helps me with advice, how could I track the date of the last connection of the host from the Osquery to the Fleet? I understand that we can see MIA (offline > 30 days), but I would like more flexible analysis when detecting problems and making changes to the configuration. If there is no such functionality, is it possible to add it in the future?
s

sundsta

06/29/2020, 4:16 PM
There’s a
seen_time
column on the
hosts
table in the database that you could query.
z

zwass

06/29/2020, 4:31 PM
That information is also returned in the API requests. You can see everything by opening the network inspector while running the web UI.
a

Artem

07/01/2020, 12:28 PM
Got it! Thanks!