Scheduled queries are not returning results from all available machines. Also, the queries don't run as per the frequency given. Is anyone else facing the same issue?

hi folks, anyone running fleet with +9000 devices?

Whats the best way to add the main packs into fleet?

well… at least according to the source, it depends on the TLS profile that’s used: https://github.com/kolide/fleet/blob/master/cmd/fleet/serve.go#L317

does anyone have have an example of deploying kolide to cloud foundry or heroku? without needing to push just a docker container?

my plan for now is to deploy 2 instances of fleet with the same mysql backend, one in dmz for devices that runs also outside the company network and one internally for in office devices.

Hi all, anyone here setup fleet with an idP?

Are you asking how to have launcher show up in that profile, or how you can read that information through osquery?

I do get a console error:

Failed to load resource: the server responded with a status of 500 ()

Q: What kind of LB should I be using to put in front of fleet? Also terminating ssl at LB and using self signed cert between lb and instance ok?

This message was deleted.

do the results of the queries only get saved to result.log? is it getting saved in the sql db at all?

by chance do you know what exactly does "fleet prepare db" if the database is already initialized and with data from a previous version of kolide?

When you say Kolide are you referring to Launcher?

i can’t seem to get it to build

Does anyone know how I can get better logs for

500

errors?

hello to everyone, when I send queries on clients, the answer does not return, I do not get any error, why do you think?

does this error happen to ring any bells on what could be wrong? -

"caller":"publish_results.go:168","err":"rpc error: code = Internal desc = stream terminated by RST_STREAM with error code: INTERNAL_ERROR","errcode":"","message":"","method":"PublishResults","reauth":false,"results":"[{\"query_name\":\"kolide_distributed_query_6\

Hi All, sorry if this had been answered, yet failed to locate a way so perhaps asking again, is there a way to reset the only kolide DB user as the password seems to have been lost and rebuilding the DB is last option i guess, >kolide->users->username will be the DB path i guess

@rwx What are the specs you gave the server?

The Fleet server should handle that scale without too much trouble. What really hurts is the dashboard page (and others) on the front end, which doesn’t use the pagination APIs provided by the backend. Fixing this is a well defined but time consuming problem. It needs a financial sponsor, which I may have lined up and so hopefully will do it soon.

hello to everyone, i am having problems with my connections with osquery deamon on fleet. How can I solve these problems sometimes when the connection is lost and not connected again?

How hard is it to deploy fleet onto kubernetes?

Hello, what is the proper syntax if i’d like multiple output channels for the result log? I’d like to have filesystem as well as pub/sub

noticing these weird paths that aren't referenced in the codebase - /kolide.agent.Api/PublishLogs

Do you know if it's safe to manually wipe the hosts table in the DB? By safe I mean if everything is expected to work fine after that and the clients will be enrolled back automatically

I've tried using

curl -k -X POST -d "{"username": "test", "Password": "test"}" -H "Content-Type: application/json" <https://url/api/v1/kolide/login>

and also

curl -X POST -k --user "admin" -H "Content-Type: application/json" <https://url/api/v1/kolide/login>

Hello happy post defcon monday. I currently have my fleet server behind a reverse proxy so that my devices can communicate back outside of the office. I want to restrict the server as much as possible though, and was wondering what specific endpoint would need to be exposed in order for devices to communicate back. is it /api/*? Basically i don’t want the console exposed as right now i’m allowing to :8080/

Howdy gang. I generated a self signed cert to play with in dev for some potential changes to our Kolide Fleet server architecture. The Fleet container starts up and will eventually exit after a few seconds. I see the following in the logs:

fleet-jwzm docker[1426]: ################################################################################
Aug 12 20:31:57 fleet-test docker[1426]: # WARNING:
Aug 12 20:31:57 fleet-test docker[1426]: #   Your Fleet database is missing required migrations. This is likely to cause
Aug 12 20:31:57 fleet-test docker[1426]: #   errors in Fleet.
Aug 12 20:31:57 fleet-test docker[1426]: #
Aug 12 20:31:57 fleet-test docker[1426]: #   Run `/usr/bin/fleet prepare db` to perform migrations.
Aug 12 20:31:57fleet-test docker[1426]: ################################################################################
Aug 12 20:31:57 fleet-test docker[1426]: ts=2019-08-12T20:31:57.228583618Z component=service method=ListUsers user=none err=null took=1.743137ms
Aug 12 20:31:57fleet-test docker[1426]: ts=2019-08-12T20:31:57.230041875Z transport=https address=0.0.0.0:8080 msg=listening
Aug 12 20:31:57 fleet-test docker[1426]: ts=2019-08-12T20:31:57.230436248Z terminated="tls: failed to find any PEM data in certificate input"

A self signed cert wouldn’t be an issue here?