I am trying to import osquery conf files(packs) in...
# general
I am trying to import osquery conf files(packs) in fleet. I don't see any option in UI. Can anyone give me some pointers if I can import conf files directly instead of creating them manually via fleet UI.
You can get Packs in Fleet UI to create queries and then send them to the osquery client
I want to import pack files which are osquery conf files. I don't want them to create manually.
You can use the Fleet CLI tool FleetCTL: First you’ll need to use the FleetCTL tool to convert the Osquery JSON pack to YAML. Then update the YAML config to Fleet https://github.com/fleetdm/fleet/blob/master/docs/1-Using-Fleet/2-fleetctl-CLI.md#update-osquery-options https://holdmybeersecurity.com/2021/01/07/getting-started-with-fleetdm-v3-6-0/