Hi, does anyone deploy fleetdm using a docker-compose file and care to share their .yml file?

Hello everyone, Can we use regular expression in queries in fleet dm UI ?

Is there any way we can query to find all the offline host and tag them through Fleet UI ?

There is specific field where we can directly select offline host , but I also want t use regex where hostnames starts with specific names

hi there. It looks like

fleet migrate db

has been deprecated. What is the new method to accomplish the same thing? Sometimes, when fleet updates, the docker container that launches it gets into a termination loop due to schema problems, and this was the way we fixed it before.

🏗️ New commits pushed to Fleet »

I'm doing some testing with orbit, but

osqueryctl

seems to be no longer functional because it's expecting a different identifier:

sh-3.2# /opt/orbit/bin/osqueryd/macos-app/stable/osquery.app/Contents/Resources/osqueryctl restart
/Library/LaunchDaemons/io.osquery.agent.plist: No such file or directory
Unload failed: 2: No such file or directory
rm: /Library/LaunchDaemons/io.osquery.agent.plist: No such file or directory

What's the "right" way to restart osquery with orbit?

Hey everyone! There is a critical bug in Fleet v 4.29.0, affecting running migrations, If you have already upgraded and migrations ran successfully, you should be in the clear. If not, hold off just a little bit. We'll be releasing a patch ASAP.

set the channel topic: ☁️🚀 The latest version of Fleet is 4.29.1. More info: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.29.1 Upgrade now: https://github.com/fleetdm/fleet/releases/latest

Hi all, I’m running fleet in ECS and using environment variables to send logs via firehose. I’ve verified that the container is able to put records to the firehose delivery streams and i’ve got the following vars set:

FLEET_OSQUERY_RESULT_LOG_PLUGIN=firehose
FLEET_OSQUERY_STATUS_LOG_PLUGIN=firehose
FLEET_FIREHOSE_RESULT_STREAM=osquery_results
FLEET_FIREHOSE_REGION=eu-central-1
FLEET_FIREHOSE_STATUS_STREAM=osquery_status

but I’m not seeing any status or result log messages in firehose. Am I missing something?

Is Fleet utilizing the Osquery status logs for operational purposes? To minimize bandwidth usage by Osquery, I am considering disabling the status log by utilizing the

--tls_disable_status_log

flag. Are there any potential drawbacks to disabling the transmission of status logs to Fleet?

While we're talking about it - what are people using to receive, work with, alert on, analyse etc. the osquery result logs? interested to hear what people are doing, or if there are any osquery-specific projects in that space since its not really in fleet's featureset

🏗️ New commits pushed to Fleet »

Hello, I just got FleetDM installed on a local CentOS VM. I'm currently trying to add an Ubuntu-Desktop VM to my hosts in Fleet but am not seeing it show up in hosts after successfully installing the .deb file... Anyone happen to know what I might be doing wrong? (Screenshot of my CentOS VM w/ FleetDM's terminal)

🏗️ New commits pushed to Fleet »

👋 greetings! I'm a new product designer working on Fleet, just wanted to take a moment and say hey 😄

Hello, does Feet support the osqueryd

logger_tls_compress

command line flag? And can it be set at Settings > Agent options > command_line_flags?

🏗️ New commits pushed to Fleet »

set the channel topic: ☁️🚀 The latest version of Fleet is 4.30.0. More info: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.30.0 Upgrade now: https://github.com/fleetdm/fleet/releases/latest

Has anyone ever built a query that would enumerate all of the listening API connections in their environment?

🏗️ New commits pushed to Fleet »

Hi there, trying to set up Fleet for osquery and am getting a

2023/04/11 09:44:46 FAIL 20230315104937_EnsureUniformCollation.go (fixing software table: aggregating dupes: Error 1253: COLLATION 'utf8mb4_unicode_ci' is not valid for CHARACTER SET 'latin1'), quitting migration.

when running the

prepare db

. I am using an existing MariaDB server version

mysql  Ver 15.1 Distrib 10.3.35-MariaDB, for Linux (x86_64) using readline 5.1

Any ideas on why this might be happening?

Fleet Device Management couldn’t be more excited to announce that, Fleet has enabled MDM features in the latest release of Fleet as a public beta broadly available to everyone. Learn more here.

Hello! Here's what's new in Fleet version 4.30.0 🚀💻 • Fleet launches GitOps-driven MDM (public beta): Fleet has enabled MDM features in this latest release as a beta available to all users • Observer+ granular role added: Give observers the ability to run live queries without defaulting access to the higher access role of maintainer • Vulnerability management update: software with a published vulnerability now include the published date, also available via webhook if you're utilizing a JIRA or Zendesk integration. • Vulnerability management update: improved version detection for macOS apps, fixed false positives • Go updated to 1.19.8 in light of Go’s https://github.com/golang/go/issues/58647 fix (not Fleet impacting, but important to keep up to date) • Uninstalling of applications from hosts will now remove the corresponding entry in Software • Bug fixes related to: Backend capability to send email via SES when SMTP is not configured, logo sizing and misalignment, and much more. Check out additional MDM highlights on: https://www.businesswire.com/news/home/20230411005449/en/Fleet-Introduces-Industry-First-Open-Source-Cross-Platform-Device-Management-MDM-Platform https://fleetdm.com/releases/fleet-introduces-mdm https://finance.yahoo.com/news/fleet-introduces-industry-first-open-140000633.html?guccounter=1 If you have a 20 minutes, I highly recommend you catch Mike and Zach chat with the folks over at https://9to5mac.com/2023/04/11/fleet-announces-open-source-cross-platform-device-management-platform/! Please read the https://fleetdm.com/releases/fleet-4.30.0 for more information as well as full details on all of the available MDM capabilities with this launch, and let us know if you have any questions!

With the launch of the MDM product, is there a timeline for iOS support? this might be a really good fit for a BYOD MDM solution for us. Understand that the osquery part of Fleet would not be on iOS, but figured it’d be worth asking 😛

will FleetDM come up with Radius Authentication in Future by any chance?

qq does orbit auto update along with osqueryd when using fleet default windows msi packaged installer

🏗️ New commits pushed to Fleet »

for those osquery folks that are interested in MDM topics, we have a slack channel in the macadmins slack (fleet) that would be awesome to join.

hey folks, first time fleet user here 🙂 trying to deploy dev environment locally for testing. Able to get instance running but when I install the .pkg on macOS host never appears in UI? If I look at UI I see some

bad certificate

or

TLS

errors? Any suggestions on how to get it to appear?