# Outdated Osquery version - Latest 5.12.1

**URL:** <https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852>\
**Category:** Elasticsearch\
**Tags:** fleet, osquery-manager\
**Created:** [July 26, 2024, 10:00am UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852 "2024-07-26T10:00:12Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![daniel-san](https://avatars.discourse-cdn.com/v4/letter/d/ccd318/32.png) [@daniel-san](https://discuss.elastic.co/u/daniel-san)\
**Post date:** [July 26, 2024, 10:00am UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852/1 "2024-07-26T10:00:12Z")

</div>

Hello there,

hope you're all doing fine!

first of all the official elastic FAQ regarding Osquery says the following:  
([Osquery FAQ | Kibana Guide [8.14] | Elastic](https://www.elastic.co/guide/en/kibana/current/osquery-faq.html))

> ## How often is Osquery updated for Osquery Manager?[edit](https://github.com/elastic/kibana/edit/8.14/docs/osquery/osquery-faq.asciidoc)
> 
> When a new [version of Osquery is released](https://github.com/osquery/osquery/releases), it is included in a subsequent Elastic Agent release and applied when the agent is upgraded. After that, when running queries from Osquery Manager in Kibana, the updated Osquery version is used. Refer to the Fleet and Elastic Agent Guide for help with [upgrading Fleet-managed Elastic Agents](https://www.elastic.co/guide/en/fleet/8.14/upgrade-elastic-agent.html).
> 
> To check what Osquery version is installed on an Elastic Agent, you can run `SELECT version FROM osquery_info;` as a live query in Kibana. The `version` in the response is the Osquery version installed on the agent.

My question simply is why the actual version we have (Cluster is 8.14.2) is 5.10.1 instead of 5.12.1?

Thanks for clarification!

---

<div class="post-metadata">

**Author:** ![JillG](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jillg/32/122488_2.png) [@JillG](https://discuss.elastic.co/u/JillG)\
**Post date:** [July 26, 2024, 12:59pm UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852/2 "2024-07-26T12:59:52Z")

</div>

Hi @daniel-san!

What version are your Elastic Agents on? Did you ever upgrade them?

---

<div class="post-metadata">

**Author:** ![aleksmaus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aleksmaus/32/56530_2.png) [@aleksmaus](https://discuss.elastic.co/u/aleksmaus)\
**Post date:** [July 26, 2024, 6:54pm UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852/3 "2024-07-26T18:54:16Z")

</div>

@daniel-san The latest agent has osquery 5.10.2 distribution packaged with it.  
We will update to 5.12.1 for the next agent release which at the moment I believe is going to be 8.16.

---

<div class="post-metadata">

**Author:** ![daniel-san](https://avatars.discourse-cdn.com/v4/letter/d/ccd318/32.png) [@daniel-san](https://discuss.elastic.co/u/daniel-san)\
**Post date:** [July 29, 2024, 8:23am UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852/4 "2024-07-29T08:23:11Z")

</div>

Hey, for sure we update them ;)! Some are at the newest version (8.14.3).

---

<div class="post-metadata">

**Author:** ![daniel-san](https://avatars.discourse-cdn.com/v4/letter/d/ccd318/32.png) [@daniel-san](https://discuss.elastic.co/u/daniel-san)\
**Post date:** [July 29, 2024, 8:25am UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852/5 "2024-07-29T08:25:21Z")

</div>

Thanks for your response! So i guess this is then somehow tied to upgrade the cluster to 8.16.x when its available?  
Then we'll stay tuned. The thing is we're experiencing a pretty annoying bug in the Kibana Osquery UI interface that randomly shows Live Querys expiering due to no reason (the data is viewable in discover).  
We had a ticket open due to this and they are working on a fix still to be released.  
That the overall reason why i stumbled upon that version difference and wanted to be informed 😉

---

<div class="post-metadata">

**Author:** ![gbeltramelli](https://avatars.discourse-cdn.com/v4/letter/g/838e76/32.png) [@gbeltramelli](https://discuss.elastic.co/u/gbeltramelli)\
**Post date:** [November 9, 2024, 6:03pm UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852/6 "2024-11-09T18:03:20Z")

</div>

Have you experienced memory leaks with scheduled packs running periodically?
