Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

:wave: Howdy! We've just converted one of our query packs for use with our Kolide Fleet tls server. We're specifying our label as `macOS` but when we use `fleetctl get packs` the platform isn't updated to reflect our target hosts.

I just tested this personally and it worked just fine. Looking at your snippet I think your targeted label has an extra space.

You have:
labels:
(space)- macOS
While it worked for me with:
labels:
(nospace)- macOS
IE removed the space before `- macOS` to be inline with `labels`

I believe you're also missing an ID number too.
Try something along the lines of:
apiVersion: v1
kind: pack
spec:
  id: &lt;some ID number not used&gt;
  name: &lt;your_pack_name&gt;
  targets:
    labels:
    - &lt;your label&gt;

thanks <@UCV9C529K> we'll give this a shot

hmm tested with spacing and ID's, not fixing the issue

I just want to make sure, your label is pointing to existing hosts - yes?

yep, the label is pointing to `macOS` which in fleet has 6 hosts currently

Can you paste the exact yaml file that you're attempting to apply? The one previously pasted has some weird line numbering indentations.

```
---
apiVersion: v1
kind: pack
spec:
  id: 2
  name: network
  targets:
    labels:
    - macOS
  queries:
  - description: Retrieves the current status of IP/IPv6 forwarding.
    interval: 3600
    name: ip_forwarding
    query: ip_forwarding
    version: 1.4.5
```

<@UCV9C529K> thanks for your help, here's our file

the label worked after we removed other queries, still debugging

`fleetctl` adds `labels:null` at the end of the file

remove that and everything is good, thanks for your help <@UCV9C529K>