https://github.com/osquery/osquery logo
Title
m

manoj434

03/08/2021, 4:06 AM
I am trying to import osquery conf files(packs) in fleet. I don't see any option in UI. Can anyone give me some pointers if I can import conf files directly instead of creating them manually via fleet UI.
d

demonbhao

03/08/2021, 7:59 AM
You can get Packs in Fleet UI to create queries and then send them to the osquery client
m

manoj434

03/08/2021, 11:06 AM
I want to import pack files which are osquery conf files. I don't want them to create manually.
c

CptOfEvilMinions

03/08/2021, 4:21 PM
You can use the Fleet CLI tool FleetCTL: First you’ll need to use the FleetCTL tool to convert the Osquery JSON pack to YAML. Then update the YAML config to Fleet https://github.com/fleetdm/fleet/blob/master/docs/1-Using-Fleet/2-fleetctl-CLI.md#update-osquery-options https://holdmybeersecurity.com/2021/01/07/getting-started-with-fleetdm-v3-6-0/