I am trying to import osquery conf files(packs) in...
# general
m
I am trying to import osquery conf files(packs) in fleet. I don't see any option in UI. Can anyone give me some pointers if I can import conf files directly instead of creating them manually via fleet UI.
d
You can get Packs in Fleet UI to create queries and then send them to the osquery client
m
I want to import pack files which are osquery conf files. I don't want them to create manually.
c
You can use the Fleet CLI tool FleetCTL: First you’ll need to use the FleetCTL tool to convert the Osquery JSON pack to YAML. Then update the YAML config to Fleet https://github.com/fleetdm/fleet/blob/master/docs/1-Using-Fleet/2-fleetctl-CLI.md#update-osquery-options https://holdmybeersecurity.com/2021/01/07/getting-started-with-fleetdm-v3-6-0/