https://github.com/osquery/osquery logo
Join Slack
Powered by
Hi friends! I have this weird issue where if I try...
# fleet
p
Hi friends! I have this weird issue where if I try to enable all the query packs in Fleet, I get a green box pop up that says 
successfully enabled scheduled packs
but when I check the 'schedule' tab it does not show any of the queries from the packs in the scheduled queries list 🤔 I checked 
osquery_result
file on my Fleet host and it's empty. Anyone encountered this before? Any ideas on what the problem and the solution might be?
In case you are wondering, the 
os_version
query is something I enabled manually outside of the packs
Also checked 
osquery_status
that kept seems to keep logging 
"message":"Error executing distributed query: fleet_detail_query_munki_info: no such table: munki_info"
but this Slack thread from 2021 suggests it might not be an issue. 🙂
z
You can think of "schedule" as a special, simpler pack (automatically targeted to all devices, or devices on teams if you have Fleet Premium). It looks like your queries in packs aren't running because those packs are not yet targeted to any hosts (see "Hosts" column).
🙏🏽 1
ty 1
p
oh got it! ... how do I target all packs to all hosts?
nevermind figured. Looks like it will need to by set by clicking on each pack individually. 🙂 Thanks!
➕ 1
7 Views
Open in Slack
PreviousNext
Powered by