Artemis Tosini

12/07/2022, 8:45 PM
Is there an easy way to test distributed queries locally? I'd rather not go through the process of connecting my dev build to a local fleet.


12/08/2022, 3:49 PM
There is a dev python TLS server implementation that can be used (I don't remember off the top of my head where in the repo it lives). It might actually be easiest to use you local Fleet dev server. If you go to the "advanced" tab, Fleet will generate you a flagfile that you can use to run osquery directly which could be easy to do with your dev build. Give it a try and lmk if you need help making that work smoothly.

Artemis Tosini

12/08/2022, 4:13 PM
Oh, cool, I'll try that then
It works pretty well if you add