Channels
  • grant seltzer

    grant seltzer

    1 year ago
    Are query packs a recommended way of scheduling queries? I'm confused about the difference between 'Schedule' configuration option and 'Pack' configuration options.
  • zwass

    zwass

    1 year ago
    Yeah, typically. Query packs help provide a bit more organization and context, and can also be loaded from separate files.
  • grant seltzer

    grant seltzer

    1 year ago
    Interesting, I assume packs came later on
    I mentioned in #kolide and #extensions as well as below, but would you expect pack query results to be logged in the same way as scheduled queries?
  • zwass

    zwass

    1 year ago
    Yes -- just with the pack name prepended to the query name
  • grant seltzer

    grant seltzer

    1 year ago
    Hm - strange. Maybe a bug that it's not working
    Thank you!
    ah - it was because it wasn't set to a snapshot