Channels
#fleet
- m
Mystery Incorporated
05/31/2022, 5:30 PMAnd now my fleetdm UI is just spinning in a circle when I try and run a query - m
Mystery Incorporated
05/31/2022, 5:31 PMI mean forever, never get a result just spins as if waiting forever - m
Mystery Incorporated
05/31/2022, 5:32 PM1m 30s is my Distributed Interval - m
Mystery Incorporated
05/31/2022, 5:38 PMCopy codeAlso "Error executing distributed query: fleet_detail_query_munki_info: no such table: munki_info","version":"5.2.3"nk- 3
- 7
- m
Mystery Incorporated
05/31/2022, 5:43 PMMy scheduled query packs are running fine, it’s just queries launched from fleet manually that are failing - m
Mystery Incorporated
05/31/2022, 5:57 PMCopy codeIn fleet error log I see: {"component":"http","err":"error in query ingestion","ingestion-err":"campaign stopped","ip_addr":"10.1.2.xx","level":"error","method":"POST","took":"6.338681ms","ts":"2022-05-31T17:54:44.282853899Z","uri":"/api/v1/osquery/distributed/write","x_for_ip_addr":"10.1.2.xx"} - m
matx
05/31/2022, 9:49 PMTrying new fleet and the “Fleet Desktop” aka “menu bar app”.m- 2
- 7
- m
Mystery Incorporated
06/01/2022, 5:46 AMDo manual queries work for anyone else? - m
Mystery Incorporated
06/01/2022, 5:47 AMCompletely broken for me, fleet-v4.15.0kn+2- 5
- 19
- m
Mystery Incorporated
06/01/2022, 7:00 AMAnd it seems policy queries are suffering which means all my devices just return a default of failing the policy because the queries don’t work - m
Mystery Incorporated
06/01/2022, 7:26 AMI rolled back to fleet-v4.13.0 and it is working so it seems it’s an issue with latest. I will step up to v4.14 and see also - m
Mystery Incorporated
06/01/2022, 7:30 AMNup v4.14 also fails so v4.13 is the last working version for me where I can do manual queries, anything beyond that version is failing. - m
Mystery Incorporated
06/01/2022, 7:40 AMYep so fleet-v4.13.2 is the last working version for me with manual & policy queries. The query packs and software vulnerability stuff works with versions beyond that but yea not policy queries or manual queries and the error in fleet_error.log is:Copy code{ "component": "http", "err": "timestamp: 2022-06-01T17:29:44+10:00: error in query ingestion", "ingestion-err": "campaign waiting for listener (please retry)", "ip_addr": "10.1.2.xx", "level": "error", "method": "POST", "took": "1.050127ms", "ts": "2022-06-01T07:29:44.655358477Z", "uri": "/api/v1/osquery/distributed/write", "x_for_ip_addr": "10.1.2.xx" } - j
jimmy
06/01/2022, 1:46 PMwhat is the jwt_key stands for?k- 2
- 3
- u
user
06/01/2022, 3:32 PM🏗️ New commits pushed to Fleet »- 0
- 1
- j
John Michael Mizerany
06/01/2022, 9:58 PMIf setting up SAML for fleet, is it necessary to enable the SMTP server for account creation?j- 2
- 1
- a
abraham linkolan
06/02/2022, 11:07 AMwhen can i read about the polices at fleetj- 2
- 1
- a
abraham linkolan
06/02/2022, 12:45 PMfrom what fleet version global agent configuration was released? to not premuim fleetk- 2
- 1
- j
jimmy
06/02/2022, 1:21 PMi cant use Vulnerability processing if i have private network right?s- 2
- 1
- j
Joe
06/03/2022, 2:13 PMHi everyone, is there a way to enable HTTP Strict Transport Security in osquery?k- 2
- 2
- j
jimmy
06/03/2022, 4:26 PMdo you know what is auth_jwt_key stands for at my configuration file at fleet serve?j- 2
- 1
- j
jimmy
06/03/2022, 4:27 PM• JWT encoding is no longer used for session keys. Sessions now default to expiring in 4 hours of inactivity. that is from github releases, what does it mean?k- 2
- 1
- p
peanut butter
06/03/2022, 4:57 PMwhat is the difference between pack with one query to schedule query?k- 2
- 1
- u
user
06/03/2022, 5:38 PM🏗️ New commits pushed to Fleet »- 0
- 1
- k
Kathy Satterlee
06/03/2022, 8:23 PMHey y'all, If you're going to be at RSAC and want to chat, I'd love to meet you! I'll be wandering about in an awesome Fleet tee.🙌 1z- 2
- 1
- n
nick fury
06/04/2022, 9:37 AMWhere can i find documentation about global agent options?g- 2
- 1
- m
Mystery Incorporated
06/04/2022, 9:47 AMYa know, as a user of an RMM myself, FleetDM + osquery is like just 1 bee’s dick away from being an RMM. Wouldn’t it be awesome to stretch it into one, even if via additional extension/s? At your asking price of $1 per device you’ll get a boat load of customers + money if you compare to the current RMM market which is usually upwards of $2 per device.z- 2
- 3
- m
Mystery Incorporated
06/05/2022, 11:27 AMHello does using orbit to deploy fleet-osquery mean we loose the signed pkg and so we loose the EndpointSecuroty stuff?gs- 3
- 5
- m
Mystery Incorporated
06/05/2022, 11:45 AMAlso, whereabouts is the extension for osquery that allows for the mdm and munki tables?jg- 3
- 3
- a
abraham linkolan
06/07/2022, 2:09 PMif I have osquery:4.8 what is the Windows operating system that works with it?z- 2
- 2