Zachary Wasserman
0502412e15
This change optimizes live queries by pushing the computation of query targets to the creation time of the query, and efficiently caching the targets in Redis. This results in a huge performance improvement at both steady-state, and when running live queries. - Live queries are stored using a bitfield in Redis, and takes advantage of bitfield operations to be extremely efficient. - Only run Redis live query test when REDIS_TEST is set in environment - Ensure that live queries are only sent to hosts when there is a client listening for results. Addresses an existing issue in Fleet along with appropriate cleanup for the refactored live query backend.
Kolide Fleet 
Fleet is the most widely used open-source osquery Fleet manager. Deploying osquery with Fleet enables live queries, and effective management of osquery infrastructure.
Documentation for Fleet can be found on GitHub.
Fleet Dashboard
Live Queries
Scheduled Query/Pack Editor
Using Fleet
The CLI
If you're interested in learning about the fleetctl CLI and flexible osquery deployment file format, see the CLI Documentation.
Deploying Osquery and Fleet
Resources for deploying osquery to hosts, deploying the Fleet server, installing Fleet's infrastructure dependencies, etc. can all be found in the Infrastructure Documentation.
Accessing The Fleet API
If you are interested in accessing the Fleet REST API in order to programmatically interact with your osquery installation, please see the API Documentation.
The Web Dashboard
Information about using the Kolide web dashboard can be found in the Dashboard Documentation.
Developing Fleet
Development Documentation
If you're interested in interacting with the Kolide source code, you will find information on modifying and building the code in the Development Documentation.
If you have any questions, please create a GitHub Issue.
Community
Chat
Please join us in the #kolide channel on Osquery Slack.
Community Projects
Below are some projects created by Kolide community members. Please submit a pull request if you'd like your project featured.
- davidrecordon/terraform-aws-kolide-fleet - Deploy Fleet into AWS using Terraform.
- deeso/fleet-deployment - Install Fleet on a Ubuntu box.
- gjyoung1974/kolide-fleet-chart - Kubernetes Helm chart for deploying Fleet.
Kolide SaaS
Looking for the quickest way to try out osquery on your fleet? Not sure which queries to run? Don't want to manage your own data pipeline?
Try our osquery SaaS platform providing insights, alerting, fleet management and user-driven security tools. We also support advanced aggregation of osquery results for power users. Get started with your 30-day free trial today.
