Hi, I’m trying to use fleet with scheduled packs, ...
# kolidej
Jean M
01/22/2020, 12:08 PMHi, I’m trying to use fleet with scheduled packs, followed the FAQ instructions but, 1) in the host osquery_schedule contains only the entry that is in the host osquery configuration file (system_info), 2) in fleet I only see requests for methods GetDistributedQueries and AuthenticateHost (from the daemon log), not sure how osquery updates its list of scheduled queries with what is configured in fleet? if anyone has any idea to help debug..please let me know
Jean M
01/22/2020, 3:49 PMOK, after some trial and error, it seems that using osquery.flags instead of setting the flags in osquery.conf made it use tls config instead of local config file.
z
zwass
01/22/2020, 11:27 PM
You must have had it configured to use the local filesystem configuration instead of tls configuration.