API Stability Short-Term

The fleetInstallationTokens() GraphQL query is used to get a list of Fleet installation tokens and related information, such as installation commands.

You can get a large amount of details on each token. However, if the number of tokens is excessive, you could instead retrieve just the name and the unique identifier of each. Then you would use that information with the fleetInstallationToken() query field to get more details on one installation token.

There are also some related mutations: createFleetInstallToken() for creating a Fleet installation token; and updateFleetInstallTokenConfigId() for changing one.

Syntax

graphql
fleetInstallationTokens: [FleetInstallationToken]!

There are no given datatypes for this query field. For the results, you can request the token itself, any commands required to install, and other related data. See the table in the Return Datatype section further down this page for more details.

Example

Below is an example of how you might use this query field:

Raw
graphql
query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "query { ^
  fleetInstallationTokens {name, token,  ^
     installationCommands{linuxCommand}, ^
     assignedConfiguration {id, name, modifiedAt} ^
    } ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();

Returned Datatype

The returned datatype is used to get the installation tokens, the commands required to install, and other parameters. You can drill down to get more details on an installation token, like LogCollector's configuration. To see these choices, you'll have to click on the links below to the relevant tables.

Table: FleetInstallationToken

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For return datatypes, this indicates that you must specify which fields you want returned in the results.
Table last updated: Jul 24, 2025
assignedConfigurationLogCollectorConfiguration  Short-TermThe assigned configuration. See LogCollectorConfiguration.
installationCommandsLogCollectorInstallCommandyes Short-TermThe installation commands. See LogCollectorInstallCommand.
jwtTokenstringyes Short-TermThe JSON web token used.
namestringyes Short-TermThe name of the Fleet installation token.
tokenstringyes Short-TermThe Fleet installation token used.