https://github.com/osquery/osquery logo
#fleet
Title
# fleet
m

Manu Odago

09/06/2021, 3:05 PM
Hello, I am trying to create labels on my fleet server to monitor some events such as file changes, resource usage and so on, I am running queries that really do not give me the results I would want, does anyone have any useful resources on labels that I can read and learn from?
m

Mystery Incorporated

09/07/2021, 4:44 AM
Don’t use label queries for this. Label queries are to group machines together so for example all computers that start with the name “Alpha”. If you want to run queries to monitor resource usage and stuff like that, just create normal queries and schedule them in a query pack.
5 Views