select value from osquery_flags where name='config_path'
Which I’ve attached. This works when run locally with osqueryi, but does not work when run via the Fleet interface:
Is there something I’m missing?
select * from quarantine_items LIMIT 1;
config plugin. This means it won't read any config off disk. You should try adding your atc entries to the config Fleet serves.