Anyone know if there's an easy way to dump the active config on a host via CLI? Using Fleet, so I'm not providing an osquery.conf to the client, but I'd like to get the conf file with scheduled queries to start doing some performance testing, instead of recreating it manually.
03/20/2020, 9:15 PM
select * from osquery_schedule
to see which queries are scheduled.
03/20/2020, 9:18 PM
Was hoping for something I could pass directly to ./tools/analysis/profile.py... I'm assuming I won't get that from that query, right?
03/20/2020, 9:23 PM
No, I'm not aware of a way to do that.
03/20/2020, 9:24 PM
Ok, I wasn't either, but thought I'd see if anyone else knew. Thanks @zwass.