I was wondering, are the fleet osquery extensions ...
# fleetj
John Lamb
03/26/2025, 12:01 PMI was wondering, are the fleet osquery extensions available for manual install/management or are they only a paid option with the fleet agent?
John Lamb
03/26/2025, 12:06 PM(I won't complain either way, I just didn't succeed in finding the answer myself)
m
Mason Buettner
03/26/2025, 3:27 PMHi @John Lamb, are there any particular extensions that you're referring to?
j
John Lamb
03/26/2025, 3:37 PMfor instance the fleet extension that includes
tcc_accessJohn Lamb
03/26/2025, 3:39 PMthis might be a thing where if you are running free fleet for managing osquery only, fleetd might not be included
John Lamb
03/26/2025, 3:41 PMI have successfully deployed the macadmins osquery extension manually, for instance
John Lamb
03/26/2025, 4:36 PMit appears i can generate these from source from the fleet github repository
m
Mason Buettner
03/26/2025, 4:40 PMThe easiest way to get those tables would be to download the fleetd package, which is free to use and does not require a premium subscription. Alternatively, you could use this method to pull the fleetd tables into standalone osquery.
j
John Lamb
03/26/2025, 5:04 PMI did #2, for some reason my searches for fleetd package are coming up blank
m
Mason Buettner
03/26/2025, 5:13 PMCan you share the output of the command that you ran to build the package?
j
John Lamb
03/26/2025, 5:36 PMi don't have the ability to send text from that machine, but it was basically just go downloading dependencies, and then succeeding without a message
John Lamb
03/26/2025, 5:37 PMand then i added the extension to my autoload (replaced the macadmin queries)
John Lamb
03/26/2025, 5:37 PMits working now :)
m
Mason Buettner
03/26/2025, 5:38 PMGlad to hear!
11 Views