Open device management
Find a file
Konstantin Sykulev 6ed3ba6801
Added OTEL DB stats metrics, renamed trace attributes to expected OTEL names (#42097)
1. Added DB metrics via otelsql.RegisterDBStatsMetrics()
`db.sql.connection.open`
`db.sql.connection.max_open`
`db.sql.connection.wait`
`db.sql.connection.wait_duration`
`db.sql.connection.closed_max_idle`
`db.sql.connection.closed_max_idle_time`
`db.sql.latency.*`
2. renamed these metrics to signoz convention/expected names
`db.sql.connection.open` -> `db.client.connection.usage`
`db.sql.connection.max_open` -> `db.client.connection.max`
`db.sql.connection.wait` -> `db.client.connection.wait_count`
`db.sql.connection.wait_duration` -> `db.client.connection.wait_time`
`db.sql.connection.closed_max_idle` -> `db.client.connection.idle.max`
`db.sql.connection.closed_max_idle_time` ->
`db.client.connection.idle.min`
3. created custom dashboard to display these metrics, (import via json)
<img width="1580" height="906" alt="Screenshot 2026-03-19 at 2 44 43 PM"
src="https://github.com/user-attachments/assets/f1b64ed6-e534-4490-8955-bc1205dd21d4"
/>
4. Fixed metrics for service db dashboards
Signoz expects

`db.system` : Identifies the database type (e.g., postgresql, mysql,
mongodb).
`db.statement` : The actual query being executed (e.g., SELECT * FROM
users).
`db.operation` : The type of operation (e.g., SELECT, INSERT).
`service.name` : The name of the service making the call.

We needed to set the `db.system` attribute explicitly.

`db.operation` is missing because otelsql doesn't capture this by
default. Decided not to add this for now as the dashboards work without.
Can be a future enhancement.

<img width="1563" height="487" alt="Screenshot 2026-03-19 at 2 45 18 PM"
src="https://github.com/user-attachments/assets/51028e16-ee2c-45a9-9025-26f17b0db67a"
/>


# Checklist for submitter

## Testing
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

## Release Notes

* **New Features**
* Added a new observability dashboard for database and connection
performance metrics, including RPS, latency, connection pool saturation,
and queue statistics.
* Enhanced database metrics collection with automatic registration of
connection and query performance indicators.
* Standardized OpenTelemetry metric naming to align with industry
conventions for improved observability compatibility.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-20 11:07:58 -05:00
.claude Removed test with env vars instructions. (#41196) 2026-03-10 13:26:26 -05:00
.github Update actions/setup-go to v6.3.0 (#42152) 2026-03-20 09:56:51 -05:00
.storybook Updating UI for Okta config (#35204) 2025-11-18 19:34:59 -06:00
.vscode Use forked node-sql-parser, fix CTE issues in parsed SQL (#38744) 2026-01-28 16:08:33 -06:00
android Make certificate list scrollable (#41891) 2026-03-20 10:43:57 -04:00
articles Update why-enterprise-linux-is-important-in-2026.md (#42132) 2026-03-20 10:24:51 -05:00
assets Display iPad screenshot in lock modal (#38475) 2026-01-20 13:26:01 +01:00
changes Allow hosts key to be empty for manual labels (#42022) 2026-03-20 10:36:14 -05:00
charts Adding changes for Fleet v4.82.0 (#40233) (#41637) 2026-03-13 09:42:29 -05:00
cmd Added OTEL DB stats metrics, renamed trace attributes to expected OTEL names (#42097) 2026-03-20 11:07:58 -05:00
docs Add GlobalProtect profile (#42096) 2026-03-19 14:54:30 -05:00
ee feat installers labels include all (#42061) 2026-03-19 15:11:54 -05:00
frontend lint 2026-03-19 14:37:56 -04:00
git-hooks Merge Android datastore into main Fleet datastore (#32233) 2025-08-25 11:41:28 -04:00
handbook Move Vanta compliance responsibilities from Finance to IT (#42074) 2026-03-19 15:21:43 -05:00
infrastructure Dogfood & Loadtest - Updating mysql engine version to 8.0.mysql_aurora.3.10.3 (#42120) 2026-03-19 21:05:24 -05:00
it-and-security Fix duplicate labels_include_any key on claude/windows (#41955) 2026-03-18 13:17:03 -05:00
orbit Rename wifi_network to macadmins_wifi_network (#40629) 2026-03-20 08:04:50 -04:00
pkg Allow hosts key to be empty for manual labels (#42022) 2026-03-20 10:36:14 -05:00
proposals Remove proposals (unused) (#26646) 2025-02-27 10:37:07 -06:00
schema Update and rename wifi_network.yml to macadmins_wifi_network.yml (#42091) 2026-03-20 10:08:19 -04:00
security Ignore false positive CVE in fleet (#41643) 2026-03-16 10:36:50 -03:00
server Added OTEL DB stats metrics, renamed trace attributes to expected OTEL names (#42097) 2026-03-20 11:07:58 -05:00
terraform Clean up "click here" and "here" link anchors - part 1 (#29731) 2025-06-04 13:54:34 -06:00
test/upgrade Bump supported MySQL versions (#40892) 2026-03-04 12:25:20 -06:00
third_party Updated go to 1.26.1 (#42027) 2026-03-19 07:01:00 -05:00
tools Added OTEL DB stats metrics, renamed trace attributes to expected OTEL names (#42097) 2026-03-20 11:07:58 -05:00
website Website: Update accepted contactSource values in CRM helpers. (#41808) 2026-03-20 10:06:31 -05:00
.coderabbit.yaml Update .coderabbit.yaml (#40875) 2026-03-10 11:21:35 -05:00
.custom-gcl.yml Update golangci-lint from 2.7.1 to 2.11.3 (#42066) 2026-03-19 11:19:42 -05:00
.dockerignore Added support to read jwt and mysql password from a file (#141) 2021-01-04 07:58:43 -08:00
.eslintignore Allow ESCAPE in LIKE clauses to be valid SQL (#31222) 2025-07-25 10:13:55 -05:00
.eslintrc.js update storybook to 8.4.7 (#25451) 2025-01-20 16:17:33 +00:00
.gitattributes Windows friendly changes after walking through getting started guide (#1441) 2021-07-21 20:49:44 -04:00
.gitignore Ignore cvefeed dir - helpful for local dev of vuln repo processes (#41615) 2026-03-13 12:13:51 -07:00
.gitpod.yml Add gitpod yml (#2915) 2021-11-19 10:03:56 -03:00
.golangci-incremental.yml Update golangci-lint from 2.7.1 to 2.11.3 (#42066) 2026-03-19 11:19:42 -05:00
.golangci.yml Update golangci-lint from 2.7.1 to 2.11.3 (#42066) 2026-03-19 11:19:42 -05:00
.goreleaser-snapshot.yml 🤖 Update goreleaser snapshot build to pull version number from branch name when applicable (#39593) 2026-02-10 13:51:52 -06:00
.goreleaser.yml Fix tagging of fleetdm/fleet and fleetdm/fleetctl when releasing (#28251) 2025-04-16 15:48:47 -03:00
.npmignore Move fleetdm.com into main Fleet repo (#83) 2020-12-02 14:48:03 -06:00
.pre-commit-config.yaml Update golangci-lint from 2.7.1 to 2.11.3 (#42066) 2026-03-19 11:19:42 -05:00
.prettierignore Allow ESCAPE in LIKE clauses to be valid SQL (#31222) 2025-07-25 10:13:55 -05:00
.prettierrc.json add prettier and have it format all fleet application code (#625) 2021-04-12 14:32:25 +01:00
.yarnrc New yarn configuration: Sets installing a dependency to a specific semantic versioning instead of latest stable (#17938) 2024-03-29 10:39:20 -04:00
babel.config.json Fleet Frontend: Create integration tests QuerySidePanel.tests.tsx (#12179) 2023-06-07 12:01:59 -04:00
CHANGELOG.md Adding changes for Fleet v4.82.0 (#40233) (#41637) 2026-03-13 09:42:29 -05:00
CODE_OF_CONDUCT.md Remove @fleetdm.com emails from fleetdm/fleet repo (#882) 2021-05-27 17:19:14 -04:00
codecov.yml Added dedicated Go test workflow for activity bounded context (#40653) 2026-02-27 07:53:57 -06:00
CODEOWNERS [merge after testing backwards compat.] Dogfood: teams => "fleets" and queries => "reports" (#39383) 2026-03-03 09:41:56 -06:00
docker-compose-redis-cluster.yml Target Redis 6 everywhere rather than a mix of 5 and 6 (#35373) 2025-11-10 17:05:44 -06:00
docker-compose.yml Run multiple independent Fleet dev servers in parallel (#41865) 2026-03-18 13:58:58 -05:00
Dockerfile-desktop-linux Updated go to 1.26.1 (#42027) 2026-03-19 07:01:00 -05:00
go.mod Bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#42011) 2026-03-19 09:32:45 -03:00
go.sum Bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#42011) 2026-03-19 09:32:45 -03:00
LICENSE Update LICENSE (#10) 2020-11-04 19:57:51 -06:00
Makefile adding gotestsum for better test output (#40753) 2026-03-03 16:01:11 -06:00
manifest.yml.cloudgov.example cloud.gov deployment (#7611) 2022-09-07 13:30:06 -05:00
osv-scanner.toml We have migrated from aws-sdk-go v1 to v2, remove scanner skip (#30469) 2025-07-02 13:33:31 -03:00
package.json Bump dompurify from 3.2.4 to 3.3.2 (#41068) 2026-03-06 14:00:21 -06:00
postcss.config.js Upgrade Bourbon to 5.1.0 and fix deprecation warnings (#1973) 2019-01-03 12:46:55 -08:00
README.md Removing run tests badge from README (#32131) 2025-08-20 12:54:48 -05:00
render.yaml Use Render Redis service (#23056) 2025-01-02 10:07:54 -06:00
SECURITY.md Add note about compatibility to security policy (#40555) 2026-02-27 09:28:54 -06:00
tsconfig.json Use forked node-sql-parser, fix CTE issues in parsed SQL (#38744) 2026-01-28 16:08:33 -06:00
webpack.config.js Silence webpack warnings (#40756) 2026-03-10 12:29:11 -05:00
yarn.lock Bump dompurify from 3.2.4 to 3.3.2 (#41068) 2026-03-06 14:00:21 -06:00

Fleet logo, landscape, dark text, transparent background

News   ·   Report a bug   ·   Handbook   ·   Why open source?   ·   Art

Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans.

A glass city in the clouds

What's it for?

Organizations like Fastly and Gusto use Fleet for vulnerability reporting, detection engineering, device management (MDM), device health monitoring, posture-based access control, managing unused software licenses, and more.

Explore data

To see what kind of data you can use Fleet to gather, check out the table reference documentation.

Out-of-the-box policies

Fleet includes out-of-the box support for all CIS benchmarks for macOS and Windows, as well as many simpler queries.

Take as much or as little as you need for your organization.

Supported platforms

Here are the platforms Fleet currently supports:

  • Linux (all distros)
  • macOS
  • Windows
  • Chromebooks
  • Amazon Web Services (AWS)
  • Google Cloud (GCP)
  • Azure (Microsoft cloud)
  • Data centers
  • Containers (kube, etc)
  • Linux-based IoT devices

Lighter than air

Fleet is lightweight and modular. You can use it for security without using it for MDM, and vice versa. You can turn off features you are not using.

Openness

Fleet is dedicated to flexibility, accessibility, and clarity. We think everyone can contribute and that tools should be as easy as possible for everyone to understand.

Good neighbors

Fleet has no ambition to replace all of your other tools. (Though it might replace some, if you want it to.) Ready-to-use, enterprise-friendly integrations exist for Snowflake, Splunk, GitHub Actions, Vanta, Elastic Jira, Zendesk, and more.

Fleet plays well with Munki, Chef, Puppet, and Ansible, as well as with security tools like Crowdstrike and SentinelOne. For example, you can use the free version of Fleet to quickly report on what hosts are actually running your EDR agent.

Free as in free

The free version of Fleet will always be free. Fleet is independently backed and actively maintained with the help of many amazing contributors.

Longevity

The company behind Fleet is founded (and majority-owned) by true believers in open source. The company's business model is influenced by GitLab (NYSE: GTLB), with great investors, happy customers, and the capacity to become profitable at any time.

In keeping with Fleet's value of openness, Fleet Device Management's company handbook is public and open source. You can read about the history of Fleet and osquery and our commitment to improving the product.

Is it any good?

Fleet is used in production by IT and security teams with thousands of laptops and servers. Many deployments support tens of thousands of hosts, and a few large organizations manage deployments as large as 400,000+ hosts.

Chat

Please join us in MacAdmins Slack or in osquery Slack.

The Fleet community is full of kind and helpful people. Whether or not you are a paying customer, if you need help, just ask.

Contributing   Go Report Card   CII Best Practices   Twitter Follow  

The landscape of cybersecurity and IT is too complex. Let's open it up.

Contributions are welcome, whether you answer questions on Slack / GitHub / StackOverflow / LinkedIn / Twitter, improve the documentation or website, write a tutorial, give a talk at a conference or local meetup, give an interview on a podcast, troubleshoot reported issues, or submit a patch. The Fleet code of conduct is on GitHub.

What's next?

To see what Fleet can do, head over to fleetdm.com and try it out for yourself, grab time with one of the maintainers to discuss, or visit the docs and roll it out to your organization.

Production deployment

Fleet is simple enough to spin up for yourself. Or you can have us host it for you. Premium features are available either way.

Documentation

Complete documentation for Fleet can be found at https://fleetdm.com/docs.

License

The free version of Fleet is available under the MIT license. The commercial license is also designed to allow contributions to paid features for users whose employment agreements allow them to contribute to open source projects. (See LICENSE.md for details.)

Fleet is built on osquery, nanoMDM, Nudge, and swiftDialog.