Hey guys is there a known issue with using letsencrypt certificates with Kolide Fleet?

Hi all, Is there a rough ETA on when fleet 2.1.1 will get pushed to the binary archive "fleet_latest.zip" ??

Sorry, the edit period timed out and I didn't finish writing. @seph oops fg-svc instead of svc-fg. That would be the problem. Yes, it isn't reading the config file because I was using fg-svc. I expect that will fix that problem now. I'll check on Saturday (it is weekend in this country now). The launcher.flag file is the same as on all the computers that I'm deploying with that MSI file, and the others are working. This computer is one that is not reporting at all. I have another one I'm looking at now which was reporting but has stopped. This one gives me this log below when I run it in foreground using the correct command you reminded me of 🙂 I'm actually wondering if it might be having the same problem. In Services.msc this one shows that the service is running, it doesn't stop with an error, yet kolide server shows it is offline. If I then stop the service and use the svc-fg command I get the result below, even though I have confirmed that the launcher service is definitely stopped. So this time I took a backup of the C:\program files\kolide folder before uninstalling (In case you want it to check anything), deleting the kolide folder, and reinstalling it. However reinstalling it did not fix the problem. "C:\Program Files\Kolide\Launcher-launcher\bin\launcher.exe" svc-fg -config "C:\Program Files\Kolide\Launcher-launcher\conf\launcher.flags" ts=2019-05-16T083859.2118496Z caller=svc_windows.go:58 severity=debug msg="foreground service start requested (debug mode)" ts=2019-05-16T083859.2178439Z caller=svc_windows.go:79 severity=debug msg="windows service starting" ts=2019-05-16T083859.225839Z caller=svc_windows.go:88 severity=info msg="runLauncher exited" err="open launcher db: open C:\\Program Files\\Kolide\\Launcher-launcher\\data\\launcher.db: Access is denied." stack="open C:\\Program Files\\Kolide\\Launcher-launcher\\data\\launcher.db: Access is denied.\nopen launcher db\nmain.runLauncher\n\t/Users/seph/go/src/github.com/kolide/launcher/cmd/launcher/launcher.go:227\nmain.(*winSvc).Execute.func1\n\t/Users/seph/go/src/github.com/kolide/launcher/cmd/launcher/svc_windows.go86\nruntime.goexit\n\t/usr/local/Cellar/go/1.12.2/libexec/src/runtime/asm amd64.s1337"

When using

package-builder

are the certificate pins specified with

-cert_pins

related to the Fleet certificate or the Notary certificate?

TIL: Enroll secrets change over time

Hi, I have a trouble with logging results. I have created a pack with 1 snapshot a osquery_info every 60 seconds with 100 shard for 3 hosts but it is not logging anything.

Hi to everybody. I have a question related with Kolide: "Does anyone can share the specs for your server as we are in the planning phase of the project and need to provision our servers?"

Hello, where can someone get a list of what additional features are available in the paid version of Kolide Fleet vice the open source version? I'm not having any luck finding it on kolide.com

the likely problem is that @Ed did not configure fleet to use the tls hostname to be the same as where the cert is served from (the external URL fleet should be riched via)

are there any other changes to 2.1.2 not listed in the Changes section? 2.1.1 has been giving me all sorts of grief and I had to downgrade to 2.1.0. I was about to file a bug, but needed further testing to confirm it's not my environment. When running a manual query, if I enter the query first, then select a host, the default query of "select * from osquery_info" is used, not the query I entered. I have to go back and update the query after the host has been selected, in order to make it work

Hello friends, I have tried but not able to add windows host in kolide fleet, can anyone please share something like flag file or any steps to add windows host in kolide

or is there any alternate software for similar as kolide fleet?? please suggest

Hey folks - can y'all please clarify for me: is configuring decorators via fleetctl/options.yaml deprecated in favor of api/json? I haven't been able to get decorators to show up at all following the cli docs.

HI guys I am getting below error while running osquery ------------------------------------ E0603 150341.403379 14856 init.cpp:593] Cannot activate filesystem logger plugin: Could not create file: \ProgramData\osquery\log\osqueryd.results.log

Maybe. I’m not sure I’ll know.

You realize that docker compose has passwords in it right? It's just to easily test stuff (and maybe to copy and template off of)

Is it best practice to just install them regularly?

Is it possible to install kolide fleet on windows?

@Staples Github is now the canonical source for Fleet binary downloads. We are trying to remove all other download links. Did you find that linked somewhere recently?

It’s in several places. The most prominent is in the installing fleet doc on Github - https://github.com/kolide/fleet/blob/master/docs/infrastructure/fleet-on-centos.md Others can be found by googling "dl.kolide.co/bin/fleet_latest.zip" (with quotes) Hope that helps

specifically, there are

go vet

errors with reuse of struct tags, but running

go test ./...

works fine

Is there an ability to collect files from endpoints using kolide?

Does kolide have the ability to make changes on endpoints?

is there a way to set Osquery to update as well, or is that something separate and I'd just need to redbuild the package(s) when there's an update?

Scale question for the group - I am looking at the possibility of deploying fleet to a decent size nonprofit organization. It’s all napkin architecture right now so I am thinking of putting it in AWS behind a load balancer that fronts an elastic pool of EC2 instances of fleet. The databases would be Aurora (MySQL compliant) and ElastiCache (Redis compliant.) Is there any guidance out there on sizing? Or ratios of # of queries to hosts to instances of fleet with CPU XX and RAM YYYY?

Howdy, folks. Anyone around who could help me out with enrolling a windows endpoint with fleet?

what would be the best way to update fleet?

I have fleet deployed on Rancher 2.x. I modified the ingress from Layer4 loadbalancer to Layer 7. I can access Fleet on port 443. The ingress appears to be working correctly when accessing the web ui, however I am not able to register any Osquery agents. Using a CA signed server cert for Fleet. I receive a certificate verification failure message. I've read other posts where the LoadBalancer needs to support GRPC. Are there any specific ingress annotation that needs to be used at the ingress?

hi can you please provide steps to add mac in kolide fleet