Users — Custom queries

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • The custom queries access operating system information using SQL, allowing for in-depth system analysis and issue resolution.

    Troubleshoot problems or collaborate with administrators by utilizing predefined Operation system instrumentation framework queries (OSQuery) queries or write a new custom query as per requirement.

    You have the option to choose a query from the Queries list and subsequently select Run to obtain the most recent response from the device.

    Note:
    Custom queries are stored in the Device Custom Query [dex_ci_device_custom_query] table. When you execute a query, the list exhibits a maximum of 100 entries retrieved from that table. For the complete set of response entries, you can refer to the Device Custom Query Response [dex_ci_device_custom_query_response] table.
    Figure 1. Custom queries section
    Execution of the Latest 100 expired certificates query on the selected device, retrieving top 100 expired certificates.