Title
#kolide
b

binu

08/17/2020, 3:09 PM
Hi, I have applied below options.yaml in fleet server using sudo fleetctl apply -f ./options.yaml , the changes not affecting in kolide server ,(the table not showing in list ) its for custom table creation anything wrong in this yaml ? please help me , fleet is running in Ubuntu apiVersion: v1 kind: options spec:   config:     decorators:       load:       - SELECT uuid AS host_uuid FROM system_info;       - SELECT hostname AS hostname FROM system_info;     file_paths:       etc:         - /etc/%%     options:       disable_distributed: false       distributed_interval: 10       distributed_plugin: tls       distributed_tls_max_attempts: 3       distributed_tls_read_endpoint: /api/v1/osquery/distributed/read       distributed_tls_write_endpoint: /api/v1/osquery/distributed/write       logger_plugin: tls       logger_tls_endpoint: /api/v1/osquery/log       logger_tls_period: 10       pack_delimiter: /     auto_table_construction:       chrome_history:       query: SELECT datetime(last_visit_time/1000000-11644473600, "unixepoch") as last_visited, url, title, visit_count FROM urls;       path: /home/%/.config/google-chrome/Default/History       columns:       - last_visited       - url       - title       - visit_count   overrides: {}
zwass

zwass

08/17/2020, 3:59 PM
Can you live query the table? Fleet doesn't currently pick up tables like this for the autocompletion if that's what you are looking at.
b

binu

08/17/2020, 4:23 PM
live query no output in kolide
6:38 AM
this feature available in older version fleet ?
zwass

zwass

08/25/2020, 3:43 PM
Fleet allows querying any table registered on the host osqueryd.