J.R. Murray
12/21/2022, 8:32 PMosqueryi --nodisable_audit --nodisable_events --audit_allow_config=true --audit_persist=true --audit_allow_sockets
etc etc) without having osqueryctl installed? We have the fleetctl agent with the osquery package (without Fleet Desktop) installed on Linux servers, Amazon Linux 2.zwass
J.R. Murray
12/21/2022, 9:36 PMconfig
file goes... don't see that in the docs you linked, apologies if that should be obviouszwass
fleetctl apply
.J.R. Murray
12/21/2022, 10:28 PMzwass
fleetctl get config
first to get your current config, then edit that with the options you want to add.J.R. Murray
12/21/2022, 10:31 PMzwass
J.R. Murray
12/21/2022, 10:50 PMzwass
J.R. Murray
12/21/2022, 10:50 PMzwass
J.R. Murray
12/21/2022, 10:51 PMzwass
J.R. Murray
12/21/2022, 10:52 PMzwass
J.R. Murray
12/21/2022, 10:53 PMzwass