Hi everyone! Thanks for the development and support of the Fleet, I will also be grateful if someone helps me with advice, how could I track the date of the last connection of the host from the Osquery to the Fleet? I understand that we can see MIA (offline > 30 days), but I would like more flexible analysis when detecting problems and making changes to the configuration. If there is no such functionality, is it possible to add it in the future?
06/29/2020, 4:16 PM
column on the
table in the database that you could query.
06/29/2020, 4:31 PM
That information is also returned in the API requests. You can see everything by opening the network inspector while running the web UI.