Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Import/Export pack configuration? #26

Open
juju4 opened this issue Mar 31, 2017 · 4 comments
Open

Import/Export pack configuration? #26

juju4 opened this issue Mar 31, 2017 · 4 comments

Comments

@juju4
Copy link

juju4 commented Mar 31, 2017

Hello,

Any way to import an existing pack configuration file either through gui or cli?
More generally, would want to import/export queries, pack or osqueryd standalone config.

Thanks

@headmin
Copy link
Collaborator

headmin commented Apr 1, 2017

Did you check out the probe feeds ? You add an osquery pack to probe feeds, then import to a new probe. Updates in the original pack will be indicated, you see a diff and decide to update your probe case by case.

Probes can be saved as a gist, i.e. you can share this with others or just store.

@juju4
Copy link
Author

juju4 commented Apr 1, 2017

No, I don't think so. But can I import through command line? where are the corresponding files?

File/Templates are easier to integrate in an orchestrated deployment.

@np5
Copy link
Member

np5 commented Apr 1, 2017

There is a django management command to add a probe feed:

python server/manage.py add_probe_feed

There is actually no way to export and import the full zentral configuration via files, but we are currently trying to find a solution.

@np5 np5 added the enhancement label Apr 1, 2017
@np5
Copy link
Member

np5 commented Feb 1, 2022

There is an API endpoint now to import Osquery packs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants