Zach Wasserman
beb7e8b965
This addresses an issue some users experienced in which performance problems were encountered when hosts were "competing" for enrollment using the same osquery host identifier. The issue is addressed by adding a cooldown period for host enrollment, preventing the same (as judged by osquery host identifier) host from enrolling more than once per minute. When users end up in the problematic scenario, they will see quite a bit of error logs due to this issue. For now that's probably a good thing as users need to be aware of the lack of visibility. We can explore rate limiting the logging if that becomes an issue for someone. Fixes #102
🎉 Announcing the transition of Fleet to a new independent entity 🎉
Please check out the blog post to understand what is happening with Fleet and our commitment to improving the product. To upgrade from Fleet ≤3.2.0, just grab the latest release from this repository (it'll work out of the box).
Fleet 
Fleet is the most widely used open source osquery manager. Deploying osquery with Fleet enables programmable live queries, streaming logs, and effective management of osquery across 50,000+ servers, containers, and laptops. It's especially useful for talking to multiple devices at the same time.
Fleet is a Go app. You can run it on your own hardware or deploy it in any cloud.
Documentation for Fleet can be found on GitHub.
Using Fleet
The CLI
If you're interested in learning about the fleetctl CLI and flexible osquery deployment file format, see the CLI Documentation.
Deploying osquery and Fleet
Resources for deploying osquery to hosts, deploying the Fleet server, installing Fleet's infrastructure dependencies, etc. can all be found in the Infrastructure Documentation.
Accessing The Fleet API
If you are interested in accessing the Fleet REST API in order to programmatically interact with your osquery installation, please see the API Documentation.
The Web Dashboard
Information about using the web dashboard can be found in the Dashboard Documentation.
Developing Fleet
Organizations large and small use osquery with Fleet every day to stay secure and compliant. That’s good news, since it means there are lots of other developers and security practitioners talking about Fleet, dreaming up features, and contributing patches. Let’s stop reinventing the wheel and build the future of device management together.
Development Documentation
If you're interested in interacting with the Fleet source code, you will find information on modifying and building the code in the Development Documentation.
If you have any questions, please create a GitHub Issue.
Community
Chat
Please join us in the #fleet channel on osquery Slack.
Community Projects
Below are some projects created by Fleet community members. Please submit a pull request if you'd like your project featured.
- Kolide is a cloud-hosted, user-driven security SaaS application. To be clear: Kolide ≠ Fleet. Kolide is well-executed, a great commercial tool, and they offer a 30-day free trial.
- davidrecordon/terraform-aws-kolide-fleet - Deploy Fleet into AWS using Terraform.
- deeso/fleet-deployment - Install Fleet on a Ubuntu box.
- gjyoung1974/kolide-fleet-chart - Kubernetes Helm chart for deploying Fleet.