hi fleet team how can i know the options i change in ui is p

Question

hi fleet team how can i know the options i change in ui is pushed to agent side

Kathy Satterlee · Answer

A good way to check is by querying the `osquery flags` table with Fleet `SELECT name value FROM osquery flags`

Kathy Satterlee · Answer

You could include a `WHERE` clause if there was a specific flag you wanted to check

wennan.he · Answer

well i am confused you mean all the options i changed in ui is also storing this osquery flags table

Kathy Satterlee · Answer

What I m recommending there is querying your hosts using Fleet not the Fleet database The response you get back will be the flags that are set on the host

Kathy Satterlee · Answer

So you can set the options you want in the UI then wait a bit to give the hosts time to check in and get the configuration then query the hosts to verify that the flags you set are reflected in the response

wennan.he · Answer

yes i understand so my question is why i cannot push flags also through fleet ui like disable events

Kathy Satterlee · Answer

Because osquery does not support setting command line flags through the `config` plugin

Kathy Satterlee · Answer

And Fleet does not write to your system so it cannot change startup commands or flag files

Kathy Satterlee · Answer

There is work being done to allow this with Orbit that you may want to keep an eye on <https github com fleetdm fleet issues 6851>

wennan.he · Answer

ok thx 4 explain