Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Title
c
chris
04/04/2018, 2:51 PMhttps://osquery.readthedocs.io/en/stable/development/pubsub-framework/
does kolide fleet have any support for events-based tables?
z
zwass
04/04/2018, 3:27 PMYep, Fleet support event based tables just like other tables. Keep in mind it usually makes the most sense to schedule queries against event based tables, but I do believe you can run a distributed query.
c
chris
04/04/2018, 3:28 PMnice!