Title
#kolide
c

chris

04/04/2018, 2:51 PM
https://osquery.readthedocs.io/en/stable/development/pubsub-framework/ does kolide fleet have any support for events-based tables?
zwass

zwass

04/04/2018, 3:27 PM
Yep, Fleet support event based tables just like other tables. Keep in mind it usually makes the most sense to schedule queries against event based tables, but I do believe you can run a distributed query.
c

chris

04/04/2018, 3:28 PM
nice!