Title
#core
zwass

zwass

04/23/2019, 10:53 PM
osquery has a remote management API but the osquery agent initiates connections to the outside world (over TLS).
s

Sunil

04/24/2019, 3:34 PM
Basic Question - noob here. For Mac Do the configurations on the endpoint go into the /var/osquery/osquery.conf and /var/osquery/osquery.conf.d/ for it to communicate with the server?
zwass

zwass

04/24/2019, 3:53 PM
Typically you would provide a flagfile (or just CLI flags) to set up the comms with the server, then the rest of the configuration would come from the server.