Summary

The fleetInstallationTokens() GraphQL query is used to get a list of Fleet installation tokens and related information, such as installation commands.

You can get a large amount of details on each token. However, if the number of tokens is excessive, you could instead retrieve just the name and the unique identifier of each. Then you would use that information with the fleetInstallationToken() query field to get more details on one installation token.

API Stability Short-Term

Syntax

graphql
fleetInstallationTokens: [FleetInstallationToken]!

There is no input for this query field. For the results, you can get the token itself, any commands required to install, and other related data. See the table in the Returned Values section farther down this page for more details.

Example

Raw
graphql
query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "query { ^
  fleetInstallationTokens {name, token,  ^
     installationCommands{linuxCommand}, ^
     assignedConfiguration {id, name, modifiedAt} ^
    } ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "query {
  fleetInstallationTokens {name, token, 
     installationCommands{linuxCommand},
     assignedConfiguration {id, name, modifiedAt}
    }
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();

Returned Values

For the results, you can get the installation tokens, the commands required to install, and other parameters, LogCollector's configuration, etc. See the table below and its links for more.

Table: FleetInstallationToken Datatype

ParameterTypeRequiredDefaultStabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results.
Table last updated: Jul 24, 2025
assignedConfigurationLogCollectorConfiguration  Short-TermThe assigned configuration. See LogCollectorConfiguration.
installationCommandsLogCollectorInstallCommandyes Short-TermThe installation commands. See LogCollectorInstallCommand.
jwtTokenstringyes Short-TermThe JSON web token used.
namestringyes Short-TermThe name of the Fleet installation token.
tokenstringyes Short-TermThe Fleet installation token used.