Channels
  • z

    Zander Mackie

    10 months ago
    Is there a way to bundle or package a default configuration (ie a set of scheduled queries and agent configuration) with fleet that can be checked into a fleet deployment repo? IE a global
    osquery.conf
    that all agents will receive when then phone home?
  • Mystery Incorporated

    Mystery Incorporated

    10 months ago
    @Zander Mackie yes, in Settings of fleet, "Global agent options" is literally a global osquery.conf, and it lets you divide configs based on platform too so you set a con fig for windows, config for linux, config for darwin (macOS) and so on. that config is pushed by fleet and overrides any local .conf file.