https://github.com/osquery/osquery logo
Title
s

sean.cavanaugh

08/12/2020, 7:57 PM
Do the Kolide options just work with Launcher?
s

seph

08/13/2020, 2:23 AM
I’m not a fleet user, but yes, I’d expect that to work.
Launcher is a wrapper/manager for osquery. The underlying osquery should have whatever the fleet specific configuration is.
s

sean.cavanaugh

08/13/2020, 3:38 PM
Thanks @seph, to clarify my question - do they fleet configuration options only work with Launcher?
s

seph

08/13/2020, 3:40 PM
No. The configuration is for osquery
s

sean.cavanaugh

08/13/2020, 5:53 PM
That’s not what I observed from some testing. I updated new config options to Kolide and then reviewed osquery_flags table on a test host before and after restarting osqueryd without any change in settings (gave the host 30+ minutes before testing).
s

seph

08/13/2020, 6:16 PM
I don’t use fleet much, so I can’t debug that. I’m not sure why you’re not seeing the options propegate.
s

sean.cavanaugh

08/13/2020, 6:44 PM
ok ty