Hi, how can we get vulnerable software per host not using the UI? Is it possible?

We talked about this in previous thread but using this endpoint https://fleetdm.com/docs/using-fleet/rest-api#get-host you will get

Oh I should have specified without having to write code that queries an API. So like is it possible to have fleet write to a log or something like that, something that I can ship to elastic so I can alert anytime a vulnerability is detected

hi!

fleetctl get software

lists all software and their CVEs

@Tomas Touceda I guess I could run fleetctl on a cronjob and pipe the output to a file I can ingest into elastic?

With --json you can easily ingest but there is no host information in this output, Just all software vulnerabilities aggregated

Oh that's not going to be useful I need to know the host with the vulnerability!

could you tell me more about the use case you are trying to cover?