I have an older fleet install and am looking to enable software, yet not the vulnerability scans. What flags do I need to add to my config file?

hi, what version are you running?

I just updated to 4.9.1. I could also be jumping the gun as I just finished the upgrade about 30 minutes ago.

to enable software inventory in 4.9.1 you simply apply the following config via fleetctl:

---
apiVersion: v1
kind: config
spec:
  host_settings:
    enable_software_inventory: true

and that should be it

Cool. Can I do that as an environmental variable as well? ENABLE_SOFTWAER_INVENTORY=1 or yes?

no, this is something that can only be applied through fleetctl, sadly

Oh well. Good to know then.

exactly

That works - I can then drop that yaml file into my git repo to track things that way.

Thanks Tomas! Also, if you do need to enable/disable vulnerabilities, you'll just need to add/remove the databases path. https://fleetdm.com/docs/using-fleet/vulnerability-processing#configuration

Good to know Rachel. What I did to handle that was to set the variable scanning instance check to no on all nodes.

FLEET_VULNERABILITIES_CURRENT_INSTANCE_CHECKS=no