packs can only be created and managed via

fleetctl

, correct?

They're still tucked away in the Fleet UI at

/packs/manage

, but we generally recommend managing query schedules using the Queries tab.

That just prefixes every query result name with

pack/Global/

It's mostly about getting all of the queries in a centralized location so that you can easily see everything that's scheduled.

fair

As one of the two people who most often need to help people track things down, it's definitely something I appreciate :)

I would be nice to see the performance impact of a group of queries, not just individual ones