Hi Folks, I had posted the question in #C08VA8R6F channel and got directed here so posting again. I am using fleetserver to fetch data from macos. What I noticed is if I disable apps table in the agent config options the fleet UI starts failing to refresh the host details with this error -"We're having trouble fetching fresh vitals for this host. Please try again later." When I look at the developer tools output, GET for this endpoint /api/latest/fleet/hosts/13?exclude_software=true succeeds but front end still keeps giving the same error. I know that server is able to talk to the host because any change in agent config options are reflected on the mac. Also, if enable the apps table front end starts showing the latest data. Let me know if this is a known issue or an expected behavior. Agent config that gives error on front end:

overrides:
  platforms:
    macos:
      options:
        distributed_interval: 10
command_line_flags:
  disable_tables: 'google_chrome_profiles,apps'

Config that works:

overrides:
  platforms:
    macos:
      options:
        distributed_interval: 10
command_line_flags:
  disable_tables: google_chrome_profiles

Hi @manoj guglani! Thank you for your question. What version of Fleet and MySQL are you running? Also, do you see any errors in the Fleet logs while the issue is occurring?

Server Version: 4.56.0, MySql - 8.0.mysql_aurora.3.07.1, osquery_version: "5.13.1", fleet desktop - 1.34.0. The only error I see is on frontend

@manoj guglani You are getting this error, because tables are being disabled that allow Fleet to collect host vitals. The

apps

table is specifically used by the

software_inventory

table, so you will either need to enable the

apps

table or disable the

software_inventory

table. Here is the documentation you would need for disabling the software_inventory table. You would also be getting this error when disabling tables that are core osquery tables and therefore do not have a discovery query to run before attempting to run their host vital query. The

apps

table is one of these tables. However, disabling the

software_inventory

table should get rid of the error. Here is a list of the tables and associated queries used in the collection of host vitals.

@Rebecca Cowart I see a feature

enable_software_inventory

. is this the correct feature or is there a different feature named

software_inventory

It's the same feature!