hi Guys , I just installed fleetdm on my laptop us...
# fleet
p
hi Guys , I just installed fleetdm on my laptop using docker images . I am trying to add my laptop as a host into fleetdm . It got added and then went offline immediately without fetching the vitals of the system . Am i missing something here ?
g
Greetings @Pavan, Do you have the fleetd agent running/enrolled? The preview does some proxy to try and enroll your local host, but if not running the agent, there's nothing for Fleet to communicate with.
p
hi @Grant Bilstad , thanks a lot for your response. I have enrolled the host . host got added and said fetching the vitals and then went offline for some reason . I have tried to uninstall and install OSquery agent but nothing helped
i have followed the instructions given in the document
g
Would you be using plain osquery (configuration/flagfile can be found in the "add hosts" -> "advanced") or a fleetd package built with fleetctl?
p
i am generating fresh fleetd agent using the following command and installing it . C:\WINDOWS\system32>%USERPROFILE%\.fleetctl\fleetctl package --type=msi --enable-scripts --fleet-desktop --fleet-url=http://192.168.0.5:1337/ --enroll-secret=jzNhFpqyxC0IItK5FkXrhDs4RcsjWuk6
this is what am seeing on UI
g
Believe if you're wanting to enroll your local device, need to change to
--fleet-url=<https://localhost:8412>
p
trying this one now .. i will update in sometime
how long should i wait before it pops up?
it still hasnt appeared . I dont see any host now
g
Once reinstalled, think the default is 10 seconds- What fleetctl are you running? We're on 4.50.1
p
fleetctl.exe - version 4.50.0 branch: HEAD revision: a540e0e38b1c0cb3d406c2ff8df3e2be4e94d962 build date: 2024-05-23 build user: runner go version: go1.21.7
g
That should be good enough, when in Fleet UI for "add hosts" -> "windows" does that url match for the
fleetctl package
command?
p
fleetctl package --type=msi --enable-scripts --fleet-desktop --fleet-url= --enroll-secret=jzNhFpqyxC0IItK5FkXrhDs4RcsjWuk6
that's what i get in that window . it doesnt have url mentioned
i could see the host when i used it with port 1337 but nothing when i use 8412
Where can i see the log of OSQuery ?
Would also check on the container running Fleet for your docker, can see logs there also. Might need to add the
--insecure
flag for testing and packaging. Is kinda wonky trying to enroll the local device that is running Fleet. Trying to test this on the fly, but running into issues with docker in my local Windows VM.
p
enroll failed, retrying error="enroll request: POST /api/fleet/orbit/enroll received status 400 unknown"
i tried using http and not https . I am getting this error when used https in the URL error - retrying error="enroll request: POST /api/fleet/orbit/enroll: Post \"https://localhost:8412/api/fleet/orbit/enroll\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
yeah .. finally i got it added --insecure was the magic word 🙂 .. thanks a ton for this help ..much appreciate it
why is it failing to fetch detailed info ? 0000027E268E8BF4: failed to query service description Failed to retrieve network statistics for interface 14
how can i enable inventory collection ?
Where can i add this or modify this ?
Copy code
---
apiVersion: v1
kind: config
spec:
  features:
    enable_software_inventory: true
g
Inventory should be on already unless you've disabled it. It takes a bit of processing to show up in Fleet (~2hrs).
437 Views