OooOps, wrong slack, sorry, this was supposed to be asked in kolide/fleet, sorry for that

no worries. the short answer is to use fleetctl. Its purpose built for this and other kolide tasks and is easier than figuring out API endpoints. https://github.com/kolide/fleet/blob/master/docs/cli/README.md If you have questions, hop over to #C1XCLA5DZ