I have added a policy in my fleetdm. When I run th...
# fleet
n
I have added a policy in my fleetdm. When I run that query it shows that 23 hosts in "NO" category. But in the policy section it shows only 3 in "NO" category. Can anyone will help me with this?
k
Hi @Nakshi Kalolia! A couple of questions: 1. Are you using Fleet Community Edition, or do you have Team's? 2. Are you using
fleetd
or plain osquery on your hosts?
n
Hey, @Kathy Satterlee I am using fleet community edition. self hosted on company's server And I am unaware about how to determine query. I am exploring already hosted fleetdm . Can you please guide me for that ? I'll add a ss of one my query
k
Can you send over a screenshot of the main view where it shows the overall count of 23?
n
The result isn't going beyond 52%
k
@Nakshi Kalolia How often do you have that policy scheduled to run? Are you seeing any errors in the Fleet logs? What about the osquery logs on the hosts that aren't responding?
n
@Kathy Satterlee Policy is scheduled for 24 hours. No logs for anything or any errors or not responding hosts.
In our self hosted fleetdm new host is added through osquery.
k
When you're enrolling hosts, are you creating the packages through fleet, or using plain osquery?
We'll want to take a look at the logs and/or flag files you've got on the host side to make sure that policies are able to come through and see if there are any errors there. The type of agent you've got installed on the hosts will make a difference in how we grab that information.
n
Using plain osquery for enrolling hosts
For logs I'll contact system admin and reply back