wennan.he
10/13/2022, 10:07 PMKathy Satterlee
10/13/2022, 11:55 PMosquery
stores in a table.osqueryd
with --tls_dump
enabled to see the response that's coming from the Fleet server when config is checked.wennan.he
10/14/2022, 12:24 AMKathy Satterlee
10/14/2022, 4:45 PMall
there for the platform. Overrides are applied to hosts based on the platform that comes back from SELECT platform FROM os_version;
, so that override wouldn't apply to any hosts.wennan.he
10/14/2022, 4:59 PMKathy Satterlee
10/14/2022, 5:28 PMall
is not a platform. You'll need to provide the actual platform you want the overrides
to apply to.darwin
for MacOS hosts or ubuntu
for Ubuntu hosts. If you aren't sure about the platform, you can run the above query against your hosts to see what pops up!wennan.he
10/14/2022, 6:11 PMKathy Satterlee
10/14/2022, 6:27 PMplatform
if you query your hosts?ubuntu
for Ubuntu hosts for example.wennan.he
10/14/2022, 9:42 PMKathy Satterlee
10/14/2022, 11:31 PM