Osquery - Fleet Threads

Channels

Topic	Authors	Views	Replies	Activity
Hello, has anyone encountered a situation where the client is often offline	d	0	4	1 year ago
I am running into an issue and I am not sure where to start looking and in which log files. I have a query that runs fine on individual machines and ran fine across almost 1500 machines last night, but is getting a few ...	b	1	3	1 year ago
@zwass I was just about to update my prod from 3.7 to 3.8 - should I hold off and go from 3.7 to 3.9 that was just released, or should I go to 3.8 in the interim?	b	0	3	1 year ago
#418 Make enrollment cooldown configurable <thread> If `osquery_host_identifier` is set to `instance` , is there any benefit to also setting `osquery_enroll_cooldown` to anything other than the default ( `0` )?	n	0	3	1 year ago
#417 - make host identifier configurable within Fleet <thread> Osquery now exposes more information during host enrollment than Fleet previously handled. ^ which osquery version introduced this? What is t...	n	0	2	1 year ago
Hello @here, we've just dropped Fleet 3.9.0 on GitHub and Docker. This release was mostly focused on stability -- We addressed some longstanding bugs that were uncovered when we added the host details page and also imp...	f	0	3	1 year ago
I’m trying to set up FIM and I’m wondering what are the different ways it can be scoped to hosts? In my current config I have it scoped to `platforms: darwin` and this works, like so: `overrides: platforms: ...`		2	3	1 year ago
Label / Additional host query question <thread> Currently (as I understand it): `osquery_label_update_interval` and `osquery_detail_update_interval` both default to `1h` . An idea to improve this: • support p...	n	1	2	1 year ago
Fleet YAML questions <thread> Is it possible to target specific labels (or hosts, whatever targeting options) for specific queries within a pack, or is targeting always done at the pack level? I noticed on the...	n	1	1	1 year ago
The current API docs say to use: https://github.com/fleetdm/fleet/blob/master/docs/1-Using-Fleet/3-REST-API.md#example-with-one-host-targeted-by-id But `/spec/` is not currently used in the Fleet API - is this future...		1	2	1 year ago

d
Hello, has anyone encountered a situation where the client is often offline
4 Replies
1 year ago
b
I am running into an issue and I am not sure where to start looking and in which log files. I have a query that runs fine on individual machines and ran fine across almost 1500 machines last night, but is getting a few ...
3 Replies
1 year ago
b
@zwass I was just about to update my prod from 3.7 to 3.8 - should I hold off and go from 3.7 to 3.9 that was just released, or should I go to 3.8 in the interim?
3 Replies
1 year ago
n
#418 Make enrollment cooldown configurable <thread>
If
osquery_host_identifier
is set to
instance
, is there any benefit to also setting
osquery_enroll_cooldown
to anything other than the default (
0
)?
3 Replies
1 year ago
n
#417 - make host identifier configurable within Fleet <thread>
Osquery now exposes more information during host enrollment than Fleet previously handled. ^ which osquery version introduced this? What is t...
2 Replies
1 year ago
Hello @here, we've just dropped Fleet 3.9.0 on GitHub and Docker. This release was mostly focused on stability -- We addressed some longstanding bugs that were uncovered when we added the host details page and also imp...
3 Replies
1 year ago
I’m trying to set up FIM and I’m wondering what are the different ways it can be scoped to hosts? In my current config I have it scoped to
platforms: darwin
and this works, like so:
overrides: platforms: ...
3 Replies
1 year ago
n
Label / Additional host query question <thread>
Currently (as I understand it):
osquery_label_update_interval
and
osquery_detail_update_interval
both default to
1h
. An idea to improve this: • support p...
2 Replies
1 year ago
n
Fleet YAML questions <thread>
Is it possible to target specific labels (or hosts, whatever targeting options) for specific queries within a pack, or is targeting always done at the pack level? I noticed on the...
1 Replies
1 year ago
The current API docs say to use: https://github.com/fleetdm/fleet/blob/master/docs/1-Using-Fleet/3-REST-API.md#example-with-one-host-targeted-by-id But
/spec/
is not currently used in the Fleet API - is this future...
2 Replies
1 year ago