API Stability Long-Term

The fleetInstallationToken() GraphQL query is used to get the Fleet installation token and related information, such as installation commands.

Related to this query field, is the fleetInstallationTokens() query to get a list of Fleet installation tokens.

There are also some related mutations: createFleetInstallToken() for creating a Fleet installation token; and updateFleetInstallTokenConfigId() for changing one.

Syntax

graphql
fleetInstallationToken(
     id: string!
   ): FleetInstallationToken

There are no special given datatypes for this query field. For the id, enter the unique identifier for the installation token. To get that, you could use the fleetInstallationTokens() query field. That query will return a list of them with IDs.

With this query, for the results, you can request the token itself, any commands required to install, and other related data. See the table in the Return Datatype section further down this page for more details.

Example

Below is an example of how you might use this query field and list return parameters:

Raw
graphql
query {
  fleetInstallationToken(id: "abc123")
    {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  fleetInstallationToken(id: \"abc123\")
    {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  fleetInstallationToken(id: \"abc123\")
    {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "query { ^
  fleetInstallationToken(id: \"abc123\") ^
    {name, token,  ^
     installationCommands{linuxCommand}, ^
     assignedConfiguration {id, name, modifiedAt} ^
    } ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "query {
  fleetInstallationToken(id: \"abc123\")
    {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "query {
  fleetInstallationToken(id: \"abc123\")
    {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "query {
  fleetInstallationToken(id: \"abc123\")
    {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "query {
  fleetInstallationToken(id: \"abc123\")
    {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();

Returned Datatype

The returned datatype is used to get the installation token, the commands required to install, and other parameters. You can drill down to get more details, like LogCollector's configuration. To see these choices, you'll have to click on the links below to the relevant tables.

Table: FleetInstallationToken

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For return datatypes, this indicates that you must specify which fields you want returned in the results.
Table last updated: Jul 24, 2025
assignedConfigurationLogCollectorConfiguration  Short-TermThe assigned configuration. See LogCollectorConfiguration.
installationCommandsLogCollectorInstallCommandyes Short-TermThe installation commands. See LogCollectorInstallCommand.
jwtTokenstringyes Short-TermThe JSON web token used.
namestringyes Short-TermThe name of the Fleet installation token.
tokenstringyes Short-TermThe Fleet installation token used.