Steampipe Plugin for FleetDM

Use SQL to access FleetDM and analyze your device data, including hosts, software, users, teams, policies, queries, packs, labels, and activities.

• Get started →
• Documentation: Table definitions & examples
• Community: Join #steampipe on Slack →
• Get involved: Issues

Quick start

Install the plugin with Steampipe:

steampipe plugin install l-teles/fleetdm

Configure the API token in ~/.steampipe/config/fleetdm.spc:

connection "fleetdm" {
  plugin = "l-teles/fleetdm"

  # FleetDM server URL (e.g., "https://fleet.example.com")
  # The plugin will attempt to append /api/v1/ if it's not present.
  server_url = "https://aiworld.cloud.fleetdm.com/"

  # FleetDM API Token
  # Generate this from your FleetDM instance (User Menu -> Settings -> API Tokens)
  api_token = "ZZFN9BBL+OldDhBzs61V1fRHg/2RkuYYq6qlLiDamDCCPL1vlFdHw=="
}

Run a query:

select
  id,
  hostname,
  display_name,
  os_version,
  platform,
  status,
  seen_time,
  team_name,
  uptime -- Uptime in nanoseconds
from
  fleetdm_host
where
  platform = 'darwin' and status = 'online'
order by
  id;

+-----+------------------+--------------+--------------+----------+--------+---------------------------+---------------+-----------------------+
| id  | hostname         | display_name | os_version   | platform | status | seen_time                 | team_name     | uptime                |
+-----+------------------+--------------+--------------+----------+--------+---------------------------+---------------+-----------------------+
| 11  | ZTKDTQZTT9.lan   | ZTKDTQZTT9   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:40+01:00 | Lisbon Office | 375,531,000,000,000   |
| 30  | J344W72143       | J344W72143   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:08:55+01:00 | Lisbon Office | 1,630,812,000,000,000 |
| 31  | ZK4MGDW2LP       | ZK4MGDW2LP   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 1,320,962,000,000,000 |
| 33  | N2TW0K2K6L       | N2TW0K2K6L   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:34+01:00 | Lisbon Office | 1,259,147,000,000,000 |
| 35  | GXG54MWCXD       | GXG54MWCXD   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 210,057,000,000,000   |
| 38  | Z77PTJYKPJ       | Z77PTJYKPJ   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:50+01:00 | Lisbon Office | 1,178,878,000,000,000 |
| 41  | C7JXXMPYL0       | C7JXXMPYL0   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:50+01:00 | Lisbon Office | 1,696,776,000,000,000 |
| 43  | CCX99XC063       | CCX99XC063   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:50+01:00 | Lisbon Office | 557,994,000,000,000   |
| 48  | ZJZ27WTNZJ       | ZJZ27WTNZJ   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:45+01:00 | Lisbon Office | 1,128,396,000,000,000 |
| 49  | G74TCTQWT4       | G74TCTQWT4   | macOS 16.7   | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 137,775,000,000,000   |
| 50  | LZZD2XTXQ2       | LZZD2XTXQ2   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:45+01:00 | Lisbon Office | 1,393,388,000,000,000 |
| 54  | J7G00M0W23       | J7G00M0W23   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:45+01:00 | Lisbon Office | 393,651,000,000,000   |
| 57  | KY35TT6D1T       | KY35TT6D1T   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 1,246,948,000,000,000 |
| 61  | D7RXCTJD2Z       | D7RXCTJD2Z   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:40+01:00 | Lisbon Office | 53,105,000,000,000    |
| 63  | CTWDTWXDTT       | CTWDTWXDTT   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:45+01:00 | Lisbon Office | 376,566,000,000,000   |
| 64  | P4999T5KTL       | P4999T5KTL   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 1,253,534,000,000,000 |
| 66  | L92PWYP0C7       | L92PWYP0C7   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:35+01:00 | Lisbon Office | 1,570,853,000,000,000 |
| 69  | R293KY46T2       | R293KY46T2   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:34+01:00 | Lisbon Office | 1,033,368,000,000,000 |
| 70  | LXGG4TYTJX.dlink | LXGG4TYTJX   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 1,247,043,000,000,000 |
| 72  | QX912CCWQL       | QX912CCWQL   | macOS 16.7   | darwin   | online | 2025-05-07T00:09:45+01:00 | Lisbon Office | 748,816,000,000,000   |
| 77  | YR1W3RQPTT       | YR1W3RQPTT   | macOS 16.7   | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 1,263,228,000,000,000 |
| 78  | QT4T9PTGXT       | QT4T9PTGXT   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:34+01:00 | Lisbon Office | 1,267,734,000,000,000 |
| 84  | TQTGW3GQT05T     | TQTGW3GQT05T | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:50+01:00 | Lisbon Office | 140,851,000,000,000   |
| 91  | N2TMW4C2Y9       | N2TMW4C2Y9   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 1,593,971,000,000,000 |
| 93  | C0959WL7N3       | C0959WL7N3   | macOS 16.7   | darwin   | online | 2025-05-07T00:09:45+01:00 | Lisbon Office | 1,266,167,000,000,000 |
| 94  | KPQGTZX26T       | KPQGTZX26T   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:24+01:00 | Lisbon Office | 1,592,664,000,000,000 |
| 96  | N40NJ0K6XY       | N40NJ0K6XY   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:50+01:00 | Lisbon Office | 1,249,775,000,000,000 |
| 99  | DWMZ39962N       | DWMZ39962N   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 365,479,000,000,000   |
| 100 | KTCX6M0XTX       | KTCX6M0XTX   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:24+01:00 | Lisbon Office | 572,287,000,000,000   |
| 101 | XP919MWJ2N       | XP919MWJ2N   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:40+01:00 | Lisbon Office | 431,944,000,000,000   |
| 184 | GN42CZTYYX       | GN42CZTYYX   | macOS 16.7   | darwin   | online | 2025-05-07T00:09:44+01:00 | Lisbon Office | 7,797,000,000,000     |
| 189 | LQX7D0WX6Y       | LQX7D0WX6Y   | macOS 16.2.0 | darwin   | online | 2025-05-07T00:09:10+01:00 | Lisbon Office | 1,675,872,000,000,000 |
+-----+------------------+--------------+--------------+----------+--------+---------------------------+---------------+-----------------------+

Development

Prerequisites:

• Steampipe
• Golang

Clone:

git clone https://github.com/l-teles/steampipe-plugin-fleetdm.git
cd steampipe-plugin-fleetdm

Build, which automatically installs the new version to your ~/.steampipe/plugins directory:

make

Configure the plugin:

cp config/* ~/.steampipe/config
vi ~/.steampipe/config/fleetdm.spc

Try it!

steampipe query
> .inspect fleetdm

Further reading:

• Writing plugins
• Writing your first table

Contributing

Please see the contribution guidelines and our code of conduct. All contributions are subject to the Apache 2.0 open source license.

help wanted issues:

• Steampipe
• FleetDM Plugin