https://github.com/osquery/osquery logo
#osctrl
Title
# osctrl
j

javuto

03/27/2020, 12:00 AM
is that something you would be interested in?
j

jf

03/27/2020, 1:27 PM
hey @javuto, I found where I can add the scheduled queries in the .conf file for a given environment. Would it be possible to store the scheduled queries and packs somewhere central, like a git repo, and then point the environments there? From there, configuring which scheduled queries & packs an environment received could be easily duplicated and managed from git. For example, if a change was made to a query used on all environments it would only be required to be changed in git, instead of modifying every environment conf. Does that make sense?
j

javuto

03/30/2020, 6:22 PM
It makes total sense. In fact, an early version of osctrl used configurations and packs from a git repository, but for usability reason, that got replaced by just a web view. I may add some configuration options to have that functionality and not just using the web editing capabilities
7 Views