Hi everyone, would love some help with getting Fleet up in AWS with Terraform

Been following the read me but can’t quite get there

when im trying load my fleet webserver at k8s I am getting the error message "Error: tls: no cipher suite supported by both client and server". does anyone know the solution for this problem? thanks.

Is anyone here logging from Fleet directly to Loki, or if not directly, through Kafka?

Thank you @Stephan M!

Hi folks (<!here>), we are excite to announce Fleet 4.16.0. There's a whole host of new features documented in the release post and the changelog. Headline features include: • Custom transparency links for Fleet Desktop (Fleet Premium) • Vulnerability scoring + known exploits (Fleet Premium) • Jira and Zendesk integrations for policies • Improved vulnerability detection accuracy for Ubuntu

but can I build orbit packages on arm64 yet?

🏗️ New commits pushed to Fleet »

Hi everyone! I’m trying to setup vulnerability processing in Fleet, and in logs I see following errors: fleet: {“component”“crons”,“cron”“vulnerabilities”,“err”:“sync cpe db: timestamp: 2022-06-22T152438+0300 Get \“https://api.github.com/repos/fleetdm/nvd/releases?per_page=10\“: dial tcp 140.82.121.6443 i/o timeout”,“level”“error”,“msg”“analyzing vulnerable software: Software-\u003eCPE”,“ts”“2022 06 22T1224:38.527181007Z”}. Fleet running behind proxy, curl and wget are working when I’m trying to download CVE databases manually from github.com and nist.gov. I found that in previous versions Fleet didn’t have proxy support, but now it should work fine with proxy. Any ideas?

In the "hosts" tab; is the a CSS file or something that lets me change the grey dot (for offline hosts) to something else? Green and grey look very similar (to me). (As an aside, maybe change the dot size and the colour of the dot depending on how long the host has been offline, as a sort of "health" indicator?)

I am working on putting fleet in aws (ref: https://fleetdm.com/guides/deploying-fleet-on-aws-with-terraform) and it appears the main branch has lost the terraform config files. https://github.com/fleetdm/fleet/tools/terraform. what is the latest release with them?

Any guides of setting up Azure as SSO in Fleet?

I see that I can modify

osquery.flags

in the orbit root, but is there documentation for what flags are set by default by Orbit?

Hi everyone, I would like to ask if it is possible to prepare the agent so that it sends endpoint data to 2 different fleet servers that are not clustered

🏗️ New commits pushed to Fleet »

Thanks to @Mystery Incorporated who posted his upgrade script a couple of weeks back. I couldn’t understand all the Git commands so I re-did the entire thing in Bash because it was quicker than learning git. Sad, I know. Here it is, please take it, torture it, improve it and let me know what could have been done better https://github.com/adamphetamine/fleetdm/blob/main/fleet-upgrade.sh

Hi everyone, is there a seamless way to migrate osquery from a CentOS server to a kubernetes instance?

Hey guys, do you know why "CONCAT" is not working with osquery ?

‘Context’ I’m setting up an API only user for analytics, but the instructions say - ‘If you would like to use your API user by default for automated workflows and still use

fleetctl

with your standard user account, you can set up your

fleetctl

config with a new

context

to hold the credentials for your admin user using the

--context

flag:’ I’m not really understanding the purpose here- I’ll probably need fleetctl access at some point, but what happens if I don’t do this?

Hi, today we realized that using UUID as a host_identifier does not work for us as we are used to clone VMs in our environment. For the same reason, Instance ID is not an alternative, as the osquery installation is cloned as well. So, I'm looking into using the hostname as an identifier. I'm not sure I get the docs correctly. Are the host identifier related settings on osquery and fleet independent of each other? I just changed the fleet server configuration to FLEET_OSQUERY_HOST_IDENTIFIER = 'hostname' . Is this sufficient and I just have to wait, I do I have to enroll the Agents with duplicated UUIDs or tell the Agents to also use hostname as an identifier? Any help appreciated. Thanks.

we decided to install the FLEET server with its GUI, on a virtual machine and from which about 100 endpoints will be managed. I would like to know what virtual machine requirements are required: VCPU NO: RAM: OS Disk Space: Disk Space: OS: we would intend to do the whole thing with docker and the fleet server will connect to an external mysql db and not on the same vm, can you tell me the minimum/ideal requirements?

Hi fleetdm devs, since Red Hat OVAL files are not compatible with CentOS, this fork of

oval-for-el

tool might be helpful for conversion: https://github.com/joseigbv/oval-for-el

I was working on something similar and that tool helped me.

has anyone built a CIS benchmark pack for fleet?

🏗️ New commits pushed to Fleet »

Does anyone know if Fleet/fleetctl goquery supports the accelerated mode ?

We were not able to get the terraform module to work (the way it was written) and ended up overhauling and want to bring it back to the product. Before we shoot a PR, can someone who worked on it hit me up for some q&a?

Hello everyone! I am trying to deploy fleet on AWS but I am having problems with the agent. What I did: 1- create a RDS 2- create a Redis 3- create a self-signed certificate 4- create an EC2, download fleet and start it. 5- generate an installer to connect to Fleet But the host is never connected. I checked the connectivity between them and it is fine. So I am with some doubts: 1 - the installer should generate a process in my machine, right? I found nothing running with fleet in the name or osquery 2- is there a debug mode for the connector?

Hey all, new to fleet and having an odd issue which I am pretty sure is me being a doof - when i attempt 'fleet prepare db' as directed in the documentation i just get "Error: No help topic for 'prepare'" lol what am i goofing up here? Thanks!

If someone builds their own osquery extension, does orbit have the ability to bundle extensions in with the osquery packages it makes? I assume it does but figure I better check

Just moved companies and a big fan of Fleet. I like the new interface much better!!! Quick Question... How do I get the Software Inventory to populate?

- I used the installer that was provided...
fleetctl package --type=pkg --fleet-url=<https://mydomain> --enroll-secret=<secret>
- I can see the hosts in Fleet and the query feature is working. THey are both M1 MBPs
- I can see that they are being fetched every hour (this tells me networking is working)
- They have been running constantly for 3 days (with osquery installed and fleet setup)

What I am missing to get software to populate?