Title
#kolide
s

shed7

10/24/2018, 8:22 AM
I see the paths set in the
file_integrity_monitoring_files
table in the
kolide
db. How does one control which endpoints receive this FIM config?
zwass

zwass

10/24/2018, 4:23 PM
Which version of Fleet are you working with?
s

shed7

10/24/2018, 6:51 PM
Hi, 2.0.0
zwass

zwass

10/24/2018, 7:21 PM
fleetctl get config
will show you the configs you have set.
s

shed7

10/24/2018, 7:43 PM
NAME:
   fleetctl get - Get/list resources

USAGE:
   fleetctl get command [command options] [arguments...]

COMMANDS:
     queries, query, q  List information about one or more queries
     packs, pack, p     List information about one or more packs
     labels, label, l   List information about one or more labels
     options            Retrieve the osquery configuration
     enroll-secret      Retrieve the osquery enroll secret
7:44 PM
get options
lists the FIM paths
7:46 PM
I suppose I'm still trying to get my head around how one should manage the various different configs that each set of endpoints will have. how do you apply FIM paths to only certain endpoints for example. I assume this is what a fleet manager like fleet is intended to do, manage fleet configs etc
zwass

zwass

10/24/2018, 7:52 PM
Ah sorry yeah
fleetctl get options
is what you need. You can set the options separately by platform as described in the docs.