Fleet is the most widely used open source osquery manager. Deploying osquery with Fleet enables programmable live queries, streaming logs, and effective management of osquery across 50,000+ servers, containers, and laptops. It's especially useful for talking to multiple devices at the same time.
# Install the Fleet command-line tool
sudo npm install -g fleetctl
# Run a local demo of the Fleet server
sudo fleetctl previewThe Fleet UI is now available at http://localhost:1337.
Ready to run your first query? Target some of your sample hosts and try it out:
For convenience, the demo includes a few simulated Linux hosts. To query a real device, install the osquery agent.
Fleet is independently backed and actively maintained with the help of many amazing contributors.
🎉 Announcing the transition of Fleet to a new independent entity 🎉
Please check out the blog post to understand what is happening with Fleet and our commitment to improving the product. To upgrade from Fleet ≤3.2.0, just grab the latest release from this repository (it'll work out of the box).
Documentation for Fleet can be found here on GitHub.
Please join us in the #fleet channel on osquery Slack.
Contributions are welcome, whether you answer questions on Slack/GitHub/StackOverflow/Twitter, improve the documentation or website, write a tutorial, give a talk, start a local osquery meetup, troubleshoot reported issues, or submit a patch. The Fleet code of conduct is on GitHub.
Below are some projects created by Fleet community members. Please submit a pull request if you'd like your project featured.
- Kolide Cloud ("K2") is a cloud-hosted, user-driven security SaaS application. To be clear: Kolide ≠ Fleet.
- davidrecordon/terraform-aws-kolide-fleet - Deploy Fleet into AWS using Terraform.
- deeso/fleet-deployment - Install Fleet on a Ubuntu box.
- gjyoung1974/kolide-fleet-chart - Kubernetes Helm chart for deploying Fleet.
