https://github.com/osquery/osquery logo
Title
m

Mystery Incorporated

06/01/2022, 7:40 AM
Yep so fleet-v4.13.2 is the last working version for me with manual & policy queries. The query packs and software vulnerability stuff works with versions beyond that but yea not policy queries or manual queries and the error in fleet_error.log is:
{
  "component": "http",
  "err": "timestamp: 2022-06-01T17:29:44+10:00: error in query ingestion",
  "ingestion-err": "campaign waiting for listener (please retry)",
  "ip_addr": "10.1.2.xx",
  "level": "error",
  "method": "POST",
  "took": "1.050127ms",
  "ts": "2022-06-01T07:29:44.655358477Z",
  "uri": "/api/v1/osquery/distributed/write",
  "x_for_ip_addr": "10.1.2.xx"
}