https://github.com/osquery/osquery logo
Title
d

Display name

03/20/2020, 9:13 PM
Anyone know if there's an easy way to dump the active config on a host via CLI? Using Fleet, so I'm not providing an osquery.conf to the client, but I'd like to get the conf file with scheduled queries to start doing some performance testing, instead of recreating it manually.
z

zwass

03/20/2020, 9:15 PM
Live query
select * from osquery_schedule
to see which queries are scheduled.
d

Display name

03/20/2020, 9:18 PM
Was hoping for something I could pass directly to ./tools/analysis/profile.py... I'm assuming I won't get that from that query, right?
z

zwass

03/20/2020, 9:23 PM
No, I'm not aware of a way to do that.
d

Display name

03/20/2020, 9:24 PM
Ok, I wasn't either, but thought I'd see if anyone else knew. Thanks @zwass.