https://github.com/osquery/osquery logo
#fleet
Title
# fleet
z

Zander Mackie

08/13/2021, 4:03 PM
Is there a way to bundle or package a default configuration (ie a set of scheduled queries and agent configuration) with fleet that can be checked into a fleet deployment repo? IE a global
osquery.conf
that all agents will receive when then phone home?
m

Mystery Incorporated

08/14/2021, 12:48 PM
@Zander Mackie yes, in Settings of fleet, "Global agent options" is literally a global osquery.conf, and it lets you divide configs based on platform too so you set a con fig for windows, config for linux, config for darwin (macOS) and so on. that config is pushed by fleet and overrides any local .conf file.
z

Zander Mackie

08/16/2021, 11:46 AM
okay awesome, thanks!
👍 1
6 Views