JJ
04/03/2024, 5:52 PMfleetctl
through Docker? Considering the possibility of automated deployments to Fleet via the API.frederick ferby
04/03/2024, 7:38 PMdistributed_interval: 10
However, is there a different interval for application fetching?Luke Heath
04/04/2024, 3:49 PMZapier
04/04/2024, 5:59 PMDoug Edey
04/04/2024, 9:08 PM(Request error: certificate verify failed)
I've used the same --tls_server_certs
option with curl and I don't get a certificate verification error, when I change the osqueryd
options to use the host machines cert (/etc/ssl/cert.pem
) osquery is fine.
This doesn't fail, which I would expect to when the fleet.pem
is invalid: curl -vvv -X POST --cacert /opt/orbit/fleet.pem https://<HOST>/api/fleet/orbit/enroll
(We are currently on an older version of fleetdm, and I'd like to avoid forcing all the clients to upgrade)Rafa Bono
04/05/2024, 7:55 AMdistributed query is denylisted
on Fleet console while querying hosts. I was looking for info on why is this happening but what I've found seems a little bit confusing to me. Can anyone explain me why is this caused and how can this be solved or if there's a way to mitigate that? Thanks in advance!Jay
04/05/2024, 6:00 PMEric Julien
04/05/2024, 6:03 PMFLEET_OSQUERY_RESULT_LOG_PLUGIN
set to "firehose"
• Verified that my results Firehose stream destination is my results bucket.
Anybody have thoughts on what I could be missing? Thanks!Keith Swagler
04/05/2024, 6:04 PMJay
04/05/2024, 7:08 PMJay
04/06/2024, 5:52 AMZapier
04/08/2024, 11:44 AMGeorge Karr
04/08/2024, 9:08 PMdefensivedepth
04/09/2024, 1:19 PM192.168.x.x - - [09/Apr/2024:13:18:08 +0000] "POST /api/v1/osquery/distributed/read HTTP/1.1" 200 147 "-" "osquery/5.11.0"
192.168.x.x - - [09/Apr/2024:13:18:08 +0000] "POST /api/v1/osquery/distributed/write HTTP/1.1" 200 3 "-" "osquery/5.11.0"
No errors in any other logs that I can see.
Any thoughts?Jason Lewis
04/09/2024, 6:35 PMALTER DATABASE fleet CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
Next steps:
- Monitor the GitHub issue for updates.
- Apply the forthcoming fix promptly upon release.
- Fleet CS team will communicate when the patch is ready
Support:
For assistance or questions, please contact our support team at support@fleetdm.com or message us back in the channel. S
We apologize for any inconvenience and are working diligently to resolve this issue swiftly.
Thank you for your understanding and cooperation!
Best,
–Fleet Customer Success teamGeorge Karr
04/10/2024, 2:07 AMEd Merrett
04/10/2024, 11:53 AMZapier
04/10/2024, 2:51 PMMike S.
04/10/2024, 9:34 PM/api/v1/fleet/hosts/:id/health?
JJ
04/11/2024, 8:45 AMZapier
04/12/2024, 2:00 PMBilly H
04/15/2024, 3:07 PMFailed to remove: MDMClientError (89): Profile with identifier 'com.policy.name.here' not found.
However I do still see the policies listed in the Profiles area of Privacy & Security and I still see them when running sudo profiles list
I've tried several varations of sudo profiles remove
on the profiles with the password included and discluded with no luck. Just getting messages about how the profile cannot be removed.
Anyone have an idea on how to clear these without nuking the machine?Zapier
04/15/2024, 9:50 PMDenis
04/16/2024, 8:51 AMAndrew Wong
04/16/2024, 7:28 PMZapier
04/16/2024, 9:42 PMJames
04/17/2024, 2:29 AMkish.jayson
04/17/2024, 3:45 AMSharon Katz
04/17/2024, 1:44 PMZapier
04/18/2024, 10:05 PM