Adding Default Queries Library

Set API Context

1. SSH into FleetDM management server
2. Set the API address: fleetctl config set --address https://fleetdm.home.lab:8080
3. My TLS certificate is self-signed, so I will skip verification: fleetctl config set --tls-skip-verify true
4. Login to the API and set the context: fleetctl login (use the web login credentials)

Clone the Fleet Repo

git clone https://github.com/fleetdm/fleet

 

Apply the Standard Query Pack

cd fleet
fleetctl apply -f docs/01-Using-Fleet/standard-query-library/standard-query-library.yml