You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| id | integer | path |**Required**. The ID of the desired query. |
5682
-
| host_id | integer | query | If provided, filters to only include results for the specified host. |
5683
5683
5684
5684
#### Example
5685
5685
@@ -5753,6 +5753,72 @@ If a query has no results stored, then `results` will be an empty array:
5753
5753
5754
5754
> Note: osquery scheduled queries do not return errors, so only non-error results are included in the report. If you suspect a query may be running into errors, you can use the [live query](#run-live-query) endpoint to get diagnostics.
| id | integer | path |**Required**. The ID of the desired host. |
5767
+
| query_id | integer | path |**Required**. The ID of the desired query. |
5768
+
5769
+
#### Example
5770
+
5771
+
`GET /api/v1/fleet/queries/31/report`
5772
+
5773
+
##### Default response
5774
+
5775
+
`Status: 200`
5776
+
5777
+
```json
5778
+
{
5779
+
"query_id": 31,
5780
+
"host_id": 1,
5781
+
"host_name": "foo",
5782
+
"last_fetched": "2021-01-19T17:08:31Z",
5783
+
"report_clipped": false,
5784
+
"results": [
5785
+
{
5786
+
"columns": {
5787
+
"model": "USB 2.0 Hub",
5788
+
"vendor": "VIA Labs, Inc."
5789
+
}
5790
+
},
5791
+
{
5792
+
"columns": {
5793
+
"model": "USB Keyboard",
5794
+
"vendor": "VIA Labs, Inc."
5795
+
}
5796
+
},
5797
+
{
5798
+
"columns": {
5799
+
"model": "USB Reciever",
5800
+
"vendor": "Logitech"
5801
+
}
5802
+
}
5803
+
]
5804
+
}
5805
+
```
5806
+
5807
+
If a query has no results stored for the specified host, then `results` will be an empty array:
5808
+
5809
+
```json
5810
+
{
5811
+
"query_id": 31,
5812
+
"host_id": 1,
5813
+
"host_name": "foo",
5814
+
"last_fetched": "2021-01-19T17:08:31Z",
5815
+
"report_clipped": false,
5816
+
"results": []
5817
+
}
5818
+
```
5819
+
5820
+
> Note: osquery scheduled queries do not return errors, so only non-error results are included in the report. If you suspect a query may be running into errors, you can use the [live query](#run-live-query) endpoint to get diagnostics.
0 commit comments