Fleet is the most widely used open-source osquery Fleet manager. Deploying osquery with Fleet enables live queries, and effective management of osquery infrastructure.
Documentation for Fleet can be found on GitHub.
Fleet Dashboard
Live Queries
Scheduled Query/Pack Editor
If you're interested in learning about the fleetctl CLI and flexible osquery deployment file format, see the CLI Documentation.
Resources for deploying osquery to hosts, deploying the Fleet server, installing Fleet's infrastructure dependencies, etc. can all be found in the Infrastructure Documentation.
If you are interested in accessing the Fleet REST API in order to programmatically interact with your osquery installation, please see the API Documentation.
Information about using the Kolide web dashboard can be found in the Dashboard Documentation.
If you're interested in interacting with the Kolide source code, you will find information on modifying and building the code in the Development Documentation.
If you have any questions, please create a GitHub Issue.
Please join us in the #kolide channel on Osquery Slack.
Below are some projects created by Kolide community members. Please submit a pull request if you'd like your project featured.
- davidrecordon/terraform-aws-kolide-fleet - Deploy Fleet into AWS using Terraform.
- deeso/fleet-deployment - Install Fleet on a Ubuntu box.
- gjyoung1974/kolide-fleet-chart - Kubernetes Helm chart for deploying Fleet.
Looking for the quickest way to try out osquery on your fleet? Not sure which queries to run? Don't want to manage your own data pipeline?
Try our osquery SaaS platform providing insights, alerting, fleet management and user-driven security tools. We also support advanced aggregation of osquery results for power users. Get started with your 30-day free trial today.
