Hi team, Is there a way to disable denylisting with orbit/fleetdm like there is with osquery (using '--events_enforce_denylist=false' in config file). Thanks in advance!

Hey @Paul_B, if I'm understanding you right, I think you're after the

distributed_denylist_duration

flag. I assume you're seeing something such as "distributed query is denylisted" in your logs?