Newbie question warning!!
Where do query packs go? Do every client need to have them locally?
12/02/2020, 11:51 AM
If you are using fleet along osquery you can configure them in the fleet server only i would say
12/02/2020, 3:53 PM
Query packs can either be configured with a config file (so locally on the machines running osqueryd), or they can be sent by using your fleet server. Like Juan said, the latter is better if you're using fleet to organize your osquery machines.
12/02/2020, 4:32 PM
Yeah, but how do I get them into the fleet-instance?