v1

latestOpenAPI 3.0.02026-07-14512083.9 KB

Fetch information for a specific Live query campaign

get/live_queries/{id}

Path parameters

idstring required

The id of the liveQueryCampaign

Response

Information about one Live query campaign

idstring

The canonical identifier for this live query campaign

osquery_sqlstring

The sql to be run on all targeted devices

namestring

The title of the live query

created_atstring date-time

The creation timestamp of the live query campaign

publishedboolean

Describes whether or not the author of the LQ has published the live query (true) or if it is still a draft (false)

revisioninteger

Editing a Live Query results in it's revision being incremented. When the live query's revision is incremented, it causes the live query to be re-run on all target devices

successful_devices_countinteger

The number of device that have successfully run the query

errored_devices_countinteger

The number of device that returned an error when attempting to run the query

waiting_devices_countinteger

The number of device that have not yet reported results or errors running the device

tables_usedstring

The names of the tables referenced in the osquery SQL