Are query packs a recommended way of scheduling queries? I'm confused about the difference between 'Schedule' configuration option and 'Pack' configuration options.
zwass
1 year ago
Yeah, typically. Query packs help provide a bit more organization and context, and can also be loaded from separate files.
grant seltzer
1 year ago
Interesting, I assume packs came later onI mentioned in #kolide and #extensions as well as below, but would you expect pack query results to be logged in the same way as scheduled queries?
zwass
1 year ago
Yes -- just with the pack name prepended to the query name
grant seltzer
1 year ago
Hm - strange. Maybe a bug that it's not workingThank you!ah - it was because it wasn't set to a snapshot
