In Fleet: is there a way to query on the hostname of an endpoint when creating a new Label?

Sure, use the

hostname

,

computer_name

, or

local_hostname

columns of the

system_info

table (https://osquery.io/schema/4.0.2#system_info).

system_info

table, perfect! thanks @zwass

just be careful on macos especially these three do not have to be the same value