Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hello! First time here but I couldn't find the answer in the documentation, online or in the SecurityOnion forums. I am trying to apply the Fleet.config file after enabling the software inventory feature but I am getting the error "Error: applying fleet config: PATCH /api/latest/fleet/config received status 422 Validation Failed: missing or invalid license". This is a self-hosted Fleet instance on a security onion VM (fleet itself is inside of a docker container).

Hey <@U05426M1YV7>! The Security Onion setup is a little different that the standard Fleet deployment. You can check out their support forum <https://github.com/Security-Onion-Solutions/securityonion/discussions|here>.

If you're able to apply config files using `fleetctl` with Security Onion (I'm not positive on the setup there), <https://github.com/fleetdm/fleet/issues/9304|this ticket >should be helpful :)

<@U02KY9FDA59> THANK YOU! That ticket was EXACTLY what I was looking for!