Information about the current queries that are scheduled in osquery.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: osquery_schedule

  • Windows
  • Linux
  • Mac OSX
  • Free BSD

Table schema

Name Type Description
name TEXT The given name for this query
query TEXT The exact query to run
interval INTEGER The interval in seconds to run this query, not an exact interval
executions BIGINT Number of times the query was executed
last_executed BIGINT UNIX time stamp in seconds of the last completed execution
blacklisted INTEGER 1 if the query is blacklisted else 0
output_size BIGINT Total number of bytes generated by the query
wall_time BIGINT Total wall time spent executing
user_time BIGINT Total user time spent executing
system_time BIGINT Total system time spent executing
average_memory BIGINT Average private memory left after executing

Query examples

Select all the results for the given table.

SELECT * FROM osquery_schedule;