Is there a way to bundle or package a default configuration (ie a set of scheduled queries and agent configuration) with fleet that can be checked into a fleet deployment repo? IE a global
that all agents will receive when then phone home?
08/14/2021, 12:48 PM
@Zander Mackie yes, in Settings of fleet, "Global agent options" is literally a global osquery.conf, and it lets you divide configs based on platform too so you set a con fig for windows, config for linux, config for darwin (macOS) and so on.
that config is pushed by fleet and overrides any local .conf file.