Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
s
Scott
03/02/2023, 9:41 AM
Hey folks, does anyone know what table fleet pulls the ‘used by’ email address from for a device?
c
chrismsnz
03/02/2023, 7:18 PM
Yep its a "detail query" that pulls from
google_chrome_profiles
https://fleetdm.com/docs/using-fleet/detail-queries-summary#google-chrome-profiles
and can be overrided in the configuration
https://fleetdm.com/docs/using-fleet/configuration-files#features-detail-query-overrides
changed ours to only return a corporate chrome profile, or a
logged_in_user
if chrome profile was null
s
Scott
03/03/2023, 11:52 AM
Damn I was hoping it wasnt linked to chrome policy as I wanted to compare that value vs chrome profile.
Thanks for the help!
#fleet
Join Slack