fleet/it-and-security/lib/linux/reports/all-rpm-hosts.yml

- name: All rhel-based (rpm) hosts
  automations_enabled: false
  description: Collects all rhel-based hosts.
  discard_data: false
  interval: 300
  logging: snapshot
  observer_can_run: true
  platform: linux
  query: SELECT * FROM os_version WHERE platform_like = 'rhel';