Santa_allowed table returning no results

[mason-buettner]

Fleet versions

• Discovered: 4.86.1
• Reproduced:

Web browser and operating system: macOS 26.5/26.6

---

💥  Actual behavior

Customer-Fairbank reports that the santa_allowed table is returning no results on hosts where Santa is enabled and running in monitor mode. This is consistent when running reports via Fleet and locally via osqueryi.

🛠️ Expected behavior

The santa_allowed table reports should consistently show results which are present.

🧑‍💻  Steps to reproduce

These steps:

• Have been confirmed to consistently lead to reproduction in multiple Fleet instances.
• Describe the workflow that led to the error, but have not yet been reproduced in multiple Fleet instances.

1. Run SELECT count(*) FROM santa_allowed; with Santa enabled and in monitor mode.
2. Observe that no results will occasionally be returned.

🕯️ More info (optional)

Customer thread: https://fleetdm.slack.com/archives/C05LE08TUD7/p1781126781005259