https://github.com/osquery/osquery logo
#kolide
Title
d

defensivedepth

06/03/2020, 9:09 AM
I am importing a bunch of queries & packs via fleetctl; the packs import with status
enabled
- How do I import them as
disabled
? I know I have done this in the past, but I can't remember/find the docs I used.
s

SK

06/03/2020, 9:20 AM
Maybe this can help? https://github.com/kolide/fleet/blob/master/server/kolide/packs.go#L123 Setting Disabled=True in the pack?
d

defensivedepth

06/03/2020, 9:33 AM
Unfortunately that doesn't work - neither does
status: disabled
s

SK

06/03/2020, 9:34 AM
Thats too bad 😞 Out of ideas for now
Or maybe export it the disabled option might be there than, to know the syntax.
z

zwass

06/03/2020, 3:34 PM
Please file an issue if this seems to be a bug.
d

defensivedepth

06/04/2020, 12:52 PM
2 Views