Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Is there a way to add new decorators within the Kolide UI?  Are those supposed to be labels?

:thumbsup: I didn't think so, but I wasn't 100% sure

Depending on what you mean. <https://github.com/kolide/fleet/pull/2236> may be what you’re looking for.

Yeah, use `fleetctl` for decorators. Labels are a totally different functionality (dynamic grouping of hosts).

I should be able to use `fleet serve --config &lt;config file` to serve up decorators if they're defined in the config file right?

No, we discussed this previously. Only the options in <https://github.com/kolide/fleet/blob/master/docs/infrastructure/configuring-the-fleet-binary.md> can be used in the config file passed to Fleet.

You will want to see <https://github.com/kolide/fleet/blob/master/docs/cli/file-format.md#osquery-configuration-options> for setting up the decorators