Hi, does anyone know if it is possible to get the hosts that were used as target in a live query from Fleet logs? I can only find this NewDistributedQueryCampaign message but it only contains the number of hosts? (I guess this is on purpose)

It's not logged. It would be possible to add a way to log hosts and labels targeted, however a host can join a label after a live query is started.

OK, thanks!