I recently upgraded from fleetdm v4.11 to latest. I am taking a look at the results from the per_query_perf query I have scheduled which seems to contain queries from legacy packs (LinuxPack, mac-pack, windows-pack, etc). I am sending the result.log via a splunk UF on the server hosting fleet. when i run the GET schedule API I was thinking the legacy packs would be there so I can stop them, but they were not. are the packs managed solely by fleetctl? or are they supposed to be running in the background by design?

Greetings @mason kemmerer, Thanks for upgrading to latest fleet Correct, packs are running in the background after 4.36. Note: there is bug introduced in 4.39.0 if running query packs, adding queries outside of Fleet, or have

pack_delimiter

set, that would break logging destination. Work-around is disabling "Query Reports" feature in Fleet UI or through server-configuration.