Fleet is the most widely used open source osquery manager. Deploying osquery with Fleet enables programmable live queries, streaming logs, and effective management of osquery across 50,000+ servers, containers, and laptops. It's especially useful for talking to multiple devices at the same time.
# Install the Fleet command-line tool sudo npm install -g fleetctl # Run a local demo of the Fleet server sudo fleetctl preview
The Fleet UI is now available at http://localhost:1337.
Your first query
Using real devices
For convenience, the demo includes a few simulated Linux hosts. To query a real device, install the osquery agent.
🎉Announcing the transition of Fleet to a new independent entity 🎉
Please check out the blog post to understand what is happening with Fleet and our commitment to improving the product. To upgrade from Fleet ≤3.2.0, just grab the latest release from this repository (it'll work out of the box).
Documentation for Fleet can be found here on GitHub.
Please join us in the #fleet channel on osquery Slack.
Contributions are welcome, whether you answer questions on Slack/GitHub/StackOverflow/Twitter, improve the documentation or website, write a tutorial, give a talk, start a local osquery meetup, troubleshoot reported issues, or submit a patch. The Fleet code of conduct is on GitHub.