Join Slack
Powered by
<https://osquery.readthedocs.io/en/stable/developm...
# kolide
c
chris
04/04/2018, 2:51 PM
https://osquery.readthedocs.io/en/stable/development/pubsub-framework/
does kolide fleet have any support for events-based tables?
z
zwass
04/04/2018, 3:27 PM
Yep, Fleet support event based tables just like other tables. Keep in mind it usually makes the most sense to schedule queries against event based tables, but I do believe you can run a distributed query.
c
chris
04/04/2018, 3:28 PM
nice!
Open in Slack
Previous
Next