https://github.com/osquery/osquery logo
Title
i

Ibra

06/17/2022, 1:50 PM
Hi all, it's possibile to group host in Fleet GUI?
j

Jason

06/17/2022, 2:03 PM
You can use labels - so you can write a query to populate a label that identifies systems to be in a particular group.
i

Ibra

06/17/2022, 2:14 PM
I want to group them by department, like hr, facility, consultants, etc.,, and not by machine type
j

Jason

06/17/2022, 2:19 PM
AFAIK you cannot group manually, so you'd need to be able to express it as a query.
and that query runs on the local device.
i

Ibra

06/17/2022, 2:20 PM
can you give me n example?
z

zwass

06/17/2022, 3:32 PM
You actually can do "manual" labels. See https://fleetdm.com/docs/using-fleet/configuration-files#labels.
j

Jason

06/17/2022, 3:33 PM
oh neat. I had no idea.
a

Adam Connor

06/19/2022, 11:08 AM
So if I deposit a .plist file on a computer as it’s being enrolled, I could read it with this? Or is there a better way? https://osquery.readthedocs.io/en/stable/development/reading-files/
z

zwass

06/19/2022, 5:11 PM
@Adam Connor you probably want the
plist
table: https://osquery.io/schema/5.3.0/#plist (eg.
select * from plist where path = '/path/to/foo.plist'
)
a

Adam Connor

06/21/2022, 5:53 AM
thanks @zwass I think I’m officially in love with Fleet and osquery now…
z

zwass

06/21/2022, 4:39 PM
Ha that's what we like to hear! 💓