J.R. Murray
12/21/2022, 8:32 PMosqueryi --nodisable_audit --nodisable_events --audit_allow_config=true --audit_persist=true --audit_allow_sockets
etc etc) without having osqueryctl installed? We have the fleetctl agent with the osquery package (without Fleet Desktop) installed on Linux servers, Amazon Linux 2.zwass
12/21/2022, 9:34 PMJ.R. Murray
12/21/2022, 9:36 PMconfig
file goes... don't see that in the docs you linked, apologies if that should be obviouszwass
12/21/2022, 9:39 PMfleetctl apply
.J.R. Murray
12/21/2022, 10:28 PMzwass
12/21/2022, 10:30 PMfleetctl get config
first to get your current config, then edit that with the options you want to add.J.R. Murray
12/21/2022, 10:31 PMzwass
12/21/2022, 10:49 PMJ.R. Murray
12/21/2022, 10:50 PMzwass
12/21/2022, 10:50 PMJ.R. Murray
12/21/2022, 10:50 PMzwass
12/21/2022, 10:50 PMJ.R. Murray
12/21/2022, 10:51 PMzwass
12/21/2022, 10:51 PMJ.R. Murray
12/21/2022, 10:52 PMzwass
12/21/2022, 10:53 PMJ.R. Murray
12/21/2022, 10:53 PMzwass
12/22/2022, 12:01 AM