Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
a
AoS
07/14/2019, 11:09 AMIs this possible through fleet?
z
zwass
07/14/2019, 7:51 PMNo, and I would guess this is a startup flag and can’t be changed through Fleet anyway. I don’t think either fleet or osquery will complain but I think it will have no effect. I’m on mobile so can’t check to be sure.
a
AoS
07/16/2019, 11:36 AMYou're right, just checked and it doesn't work. A weird thing is that although it doesn't work, when quering osquery_flags from the UI it shows as if it did.
z
zwass
07/16/2019, 4:39 PMYeah osquery will take and store the value but it will be after the time it would take effect. It would be great if we could get osquery to at least spit out a warning when a startup flag is provided in a later config.