Hey all, we are trying to integrate fleet/orbit into our existing MDR solution. Is there a way to send alerts from fleet? I didnt see anything in the documentation or config. Any help would be appreciated.

Typically you would pipe logs from fleet to your logging solution and alert on those (logs from query packs)

Thanks Jason! As of now, there are no alerts in Fleet

Yes I do what Jason says about using another solution. I use logstash to soak up the osquery_results log into Elastic and I have Elastalert sending alerts to email and Teams. It works well you should try it.