https://github.com/osquery/osquery logo
Title
z

zwass

05/08/2018, 7:06 PM
If you have additional perspective here, we'd love to hear it.
w

Woogs

05/08/2018, 8:04 PM
I certainly see the benefit of being able to do it via the CLI and/or via config files. However, I'd argue the barrier to entry is a bit higher when CLI/config files start to come into play. When creating a new pack requires SSHing into a bastion, and then into the fleet server, it just slightly increases the effort. Certainly not impossible, but potentially more inconvenient for something small. Especially true if there is a small team looking to make changes, some team members will be able to transition easily enough, but others (potentially more junior) will require a bit more effort