Anyone know if there's an easy way to dump the active config on a host via CLI? Using Fleet, so I'm not providing an osquery.conf to the client, but I'd like to get the conf file with scheduled queries to start doing some performance testing, instead of recreating it manually.
z
zwass
03/20/2020, 9:15 PM
Live query
select * from osquery_schedule
to see which queries are scheduled.
d
Display name
03/20/2020, 9:18 PM
Was hoping for something I could pass directly to ./tools/analysis/profile.py... I'm assuming I won't get that from that query, right?
z
zwass
03/20/2020, 9:23 PM
No, I'm not aware of a way to do that.
d
Display name
03/20/2020, 9:24 PM
Ok, I wasn't either, but thought I'd see if anyone else knew. Thanks @zwass.