{"id":14141,"date":"2022-09-26T22:48:54","date_gmt":"2022-09-26T19:48:54","guid":{"rendered":"https:\/\/kifarunix.com\/?p=14141"},"modified":"2024-03-09T21:17:20","modified_gmt":"2024-03-09T18:17:20","slug":"install-fleet-osquery-manager-on-rocky-linux","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/install-fleet-osquery-manager-on-rocky-linux\/","title":{"rendered":"Install Fleet Osquery Manager on Rocky Linux"},"content":{"rendered":"\n<p>In this tutorial, you will learn how to install <a aria-label=\"Fleet (opens in a new tab)\" class=\"rank-math-link\" href=\"https:\/\/fleetdm.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Fleet<\/a> osquery manager on Rocky Linux. According to its <a aria-label=\"Github repository (opens in a new tab)\" class=\"rank-math-link\" href=\"https:\/\/github.com\/fleetdm\/fleet\" target=\"_blank\" rel=\"noreferrer noopener\">Github repository<\/a>, &#8220;<em>Fleet is the most widely used open source osquery manager. Deploying osquery with Fleet enables programmable live queries, streaming logs, and effective management of osquery across 50,000+ servers, containers, and laptops. It&#8217;s especially useful for talking to multiple devices at the same time.<\/em>&#8220;<\/p>\n\n\n\n<p>If you are using Ubuntu, you can use the guide below;<\/p>\n\n\n\n<p><a aria-label=\" (opens in a new tab)\" class=\"rank-math-link\" href=\"https:\/\/kifarunix.com\/install-fleet-osquery-manager-on-ubuntu\/\" target=\"_blank\" rel=\"noreferrer noopener\">Install Fleet Osquery Manager on Ubuntu 20.04\/Ubuntu 22.04<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Install Fleet Osquery Manager on Rocky Linux<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Install MySQL Database<\/h3>\n\n\n\n<p>Fleet uses MySQL as its main database. Thus, to install MySQL on Rocky Linux, run the commands below;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>dnf install mysql-server<\/code><\/pre>\n\n\n\n<p>Once the installation is done, start and enable MySQL to run on system boot;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl enable --now mysqld<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Create Fleet Database and Database User<\/h3>\n\n\n\n<p>Run the initial MySQL security script,&nbsp;<strong>mysql_secure_installation<\/strong>, to remove anonymous database users, test tables, disable remote root login.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>mysql_secure_installation<\/code><\/pre>\n\n\n\n<p>By default, root@localhost is created with an empty password can login by just running,&nbsp;<code><strong>mysql -u root<\/strong><\/code> or <code><strong>mysql<\/strong><\/code> or <code><strong>mysql -u root -p<\/strong><\/code> and press ENTER.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>mysql -u root -p<\/code><\/pre>\n\n\n\n<p>Next, create the Fleet database.<\/p>\n\n\n\n<p><strong>Note:<\/strong>&nbsp;<strong>the database database names used here are not standard. Choose any name of your preference.<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>create database fleetdb;<\/code><\/pre>\n\n\n\n<p>Create Fleet database user with all grants on Fleet DB created above.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>create user fleetadmin@localhost identified by 'StrongP@SS';<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>grant all on fleetdb.* to fleetadmin@localhost;<\/code><\/pre>\n\n\n\n<p>Reload privileges tables and exit the database;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>flush privileges;\nexit<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Install Redis on Rocky Linux<\/h4>\n\n\n\n<p><em>Fleet uses Redis to ingest and queue the results of distributed queries, cache data, etc.<\/em><\/p>\n\n\n\n<p>Install Redis on Rocky Linux by running the command below;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>dnf install redis<\/code><\/pre>\n\n\n\n<p>Start and enable Redis to run on system boot;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl enable --now redis<\/code><\/pre>\n\n\n\n<p>Check the status;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl status redis<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>\u25cf redis.service - Redis persistent key-value database\n     Loaded: loaded (\/usr\/lib\/systemd\/system\/redis.service; enabled; vendor preset: disabled)\n    Drop-In: \/etc\/systemd\/system\/redis.service.d\n             \u2514\u2500limit.conf\n     Active: active (running) since Mon 2022-09-26 22:30:38 EAT; 6s ago\n   Main PID: 3024 (redis-server)\n     Status: \"Ready to accept connections\"\n      Tasks: 5 (limit: 5891)\n     Memory: 7.3M\n        CPU: 23ms\n     CGroup: \/system.slice\/redis.service\n             \u2514\u25003024 \"\/usr\/bin\/redis-server 127.0.0.1:6379\"\n\nSep 26 22:30:38 localhost.localdomain systemd[1]: Starting Redis persistent key-value database...\nSep 26 22:30:38 localhost.localdomain systemd[1]: Started Redis persistent key-value database.\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Install Fleet Osquery Manager<\/h3>\n\n\n\n<p><em>The Fleet application is distributed as a single static binary. This binary serves:<\/em><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><em>The Fleet web interface<\/em><\/li>\n\n\n\n<li><em>The Fleet application API endpoints<\/em><\/li>\n\n\n\n<li><em>The osquery TLS server API endpoints<\/em><\/li>\n<\/ul>\n\n\n\n<p>Download the latest Fleet binary from the <a href=\"https:\/\/github.com\/fleetdm\/fleet\/releases\/\" target=\"_blank\" rel=\"noreferrer noopener\">releases page<\/a>;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>curl -LO https:\/\/github.com\/fleetdm\/fleet\/releases\/download\/fleet-v4.20.1\/fleet_v4.20.1_linux.tar.gz<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -LO https:\/\/github.com\/fleetdm\/fleet\/releases\/download\/fleet-v4.20.1\/fleetctl_v4.20.1_linux.tar.gz<\/code><\/pre>\n\n\n\n<p>Extract the binaries for Linux platform:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>tar xzf fleet_v4.20.1_linux.tar.gz<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>tar xzf fleetctl_v4.20.1_linux.tar.gz<\/code><\/pre>\n\n\n\n<p>Copy Fleet binaries to binaries directories;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>cp fleet_v4.20.1_linux\/fleet \/usr\/local\/bin\/<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>cp fleetctl_v4.20.1_linux\/fleetctl \/usr\/local\/bin\/<\/code><\/pre>\n\n\n\n<p>To verify the binaries are in place;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>which fleet fleetctl<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>\/usr\/local\/bin\/fleet\n\/usr\/local\/bin\/fleetctl<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Running&nbsp; Fleet Server on Rocky Linux<\/h3>\n\n\n\n<h5 class=\"wp-block-heading\">Initialize Fleet Database<\/h5>\n\n\n\n<p>To initialize Fleet infrastructure after installing and setting up all the requirements above, use the&nbsp;<code>fleet prepare db<\/code>&nbsp;as follows;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>fleet prepare db --mysql_address=127.0.0.1:3306 --mysql_database=fleetdb --mysql_username=fleetadmin --mysql_password=StrongP@SS<\/code><\/pre>\n\n\n\n<p>If the initialization completes successfully, you should get the output,<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>INFO: 22:33:40 Adding software_id column to software_cve table...\nINFO: 22:33:40 Done adding software_id column to software_cve table...\nINFO: 22:33:40 Updating software_id column in software_cve table...\nINFO: 22:33:40 Nothing to update ...\nINFO: 22:33:40 Done updating 'software_id'...\nINFO: 22:33:40 Adding index to 'software_id'...\nINFO: 22:33:40 Done adding index to 'software_id'...\nINFO: 22:33:40 Trying to acquire lock...\nINFO: 22:33:40 Lock acquired...\nINFO: 22:33:40 Removing duplicates in the software_cve table\nINFO: 22:33:40 Adding unique constraint on (cve, software_id) to software_cve table...\nINFO: 22:33:40 Done adding unique constraint on (cve, software_id) to software_cve table...\nINFO: 22:33:40 Creating table mobile_device_management_solutions...\nINFO: 22:33:40 Done creating table mobile_device_management_solutions...\nINFO: 22:33:40 Adding column mdm_id to table host_mdm...\nINFO: 22:33:40 Done adding column mdm_id to table host_mdm...\nINFO: 22:33:40 Adding index on mdm_id of table host_mdm...\nINFO: 22:33:40 Done adding index on mdm_id of table host_mdm...\nINFO: 22:33:40 Adding index on enrolled, installed_from_dep of table host_mdm...\nINFO: 22:33:40 Done adding index on enrolled, installed_from_dep of table host_mdm...\nINFO: 22:33:40 Increasing width of software.vendor...\nINFO: 22:33:41 Done increasing width of software.vendor...\nINFO: 22:33:41 Creating table munki_issues...\nINFO: 22:33:41 Done creating table munki_issues...\nINFO: 22:33:41 Creating table host_munki_issues...\nINFO: 22:33:41 Done creating table host_munki_issues...\nINFO: 22:33:41 Deleting dummy software_cpe entries...\nINFO: 22:33:41 Done deleting dummy cpe_id entries...\nINFO: 22:33:41 Removing cpe_id from software_cve...\nINFO: 22:33:41 Done removing cpe_id from software_cve...\nMigrations completed.\n<\/code><\/pre>\n\n\n\n<h5 class=\"wp-block-heading\">Generate SSL\/TLS Certificates<\/h5>\n\n\n\n<p>Fleet server is used to run the main HTTPS server. Hence, run the command below to generate self-signed certificates.<\/p>\n\n\n\n<p>NOTE:&nbsp;<strong>If you are using Self Signed Certificates as in this demo, DO NOT use wildcards lest enrollment of hosts won\u2019t work.<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout \/etc\/ssl\/certs\/fleet.key -out \/etc\/ssl\/certs\/fleet.cert -subj \"\/CN=*.kifarunix-demo.com\/\"<\/code><\/pre>\n\n\n\n<p><strong>If you can, use the commercial TLS certificates from your preferred trusted CA.<\/strong><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Launching Fleet Osquery Manager<\/h4>\n\n\n\n<p>Once you have initialized the database, obtained the TLS certs and get a JWT random key, you can then launch it to verify that it can run successfully using the&nbsp;<strong>fleet serve<\/strong>&nbsp;command as shown below.<\/p>\n\n\n\n<p>The syntax for running <code><strong>fleet serve<\/strong><\/code> is given below;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>fleet serve [flags]<\/code><\/pre>\n\n\n\n<p>There are different ways in which you can specify Fleet flags;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"#cli-flags\" class=\"rank-math-link\">On command line<\/a><\/li>\n\n\n\n<li><a href=\"#env-variables\" class=\"rank-math-link\">Using environment variables<\/a><\/li>\n\n\n\n<li><a href=\"#config-file\" class=\"rank-math-link\">Using a configuration file<\/a><\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"cli-flags\">Specifying Fleet Manager Flags on Command line<\/h5>\n\n\n\n<p>You can specify the flags on command line as shown below;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>fleet serve --mysql_address=127.0.0.1:3306 \\\n--mysql_database=fleetdb --mysql_username=fleetadmin --mysql_password=StrongP@SS \\\n--server_cert=\/etc\/ssl\/certs\/fleet.cert --server_key=\/etc\/ssl\/certs\/fleet.key \\\n--logging_json<\/code><\/pre>\n\n\n\n<p>If all is well, you should see that Fleet server is now running on&nbsp;<strong>0.0.0.0:8080<\/strong>&nbsp;and hence can be accessed on&nbsp;<strong>https:\/\/&lt;server-IP&gt;:8080<\/strong>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\"component\":\"service\",\"err\":null,\"level\":\"info\",\"method\":\"ListUsers\",\"took\":\"1.943838ms\",\"ts\":\"2021-03-22T17:42:25.40539689Z\",\"user\":\"none\"}\n{\"address\":\"0.0.0.0:8080\",\"msg\":\"listening\",\"transport\":\"https\",\"ts\":\"2021-03-22T17:42:25.406425857Z\"}<\/code><\/pre>\n\n\n\n<p>Press Ctrl+c to stop Fleet server.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"env-variables\">Specifying Fleet Manager Flags Using Environment Variables<\/h5>\n\n\n\n<p>Similarly, you can specify the Fleet flags using environment variables as shown below (update the values for the environment variables and paste the command on the terminal);<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>FLEET_MYSQL_ADDRESS=127.0.0.1:3306 \\\nFLEET_MYSQL_DATABASE=fleetdb \\\nFLEET_MYSQL_USERNAME=fleetadmin \\\nFLEET_MYSQL_PASSWORD=StrongP@SS \\\nFLEET_REDIS_ADDRESS=127.0.0.1:6379 \\\nFLEET_SERVER_CERT=\/etc\/ssl\/certs\/fleet.cert \\\nFLEET_SERVER_KEY=\/etc\/ssl\/certs\/fleet.key \\\nFLEET_LOGGING_JSON=true \\\n$(which fleet) serve\n<\/code><\/pre>\n\n\n\n<p>Similarly, press Ctrl+c to stop Fleet server.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"config-file\">Setting the Fleet Manager Flags in a Configuration file<\/h5>\n\n\n\n<p>You can create a YAML configuration file where you can define the flags and their options. For example, let us create a configuration file, e.g <strong><code>\/etc\/fleet\/fleet.yml<\/code><\/strong>.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>mkdir \/etc\/fleet<\/code><\/pre>\n\n\n\n<p>The, create a YAML configuration file under the directory above.<\/p>\n\n\n\n<p>You can simply execute the command below and be sure to replace your settings appropriately.<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>cat &gt; \/etc\/fleet\/fleet.yml &lt;&lt; 'EOL'\nmysql:\n  address: 127.0.0.1:3306\n  database: fleetdb\n  username: fleetadmin\n  password: StrongP@SS\nredis:\n  address: 127.0.0.1:6379\nserver:\n  cert: \/etc\/ssl\/certs\/fleet.cert\n  key: \/etc\/ssl\/certs\/fleet.key\nlogging:\n  json: true\n# auth:\n# jwt_key: 0iXLJRKhB77puDm13G6ehgkClK0kff6N\nEOL\n<\/code><\/pre>\n\n\n\n<p>Next, launch the Fleet manager by running the command below;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>fleet serve -c \/etc\/fleet\/fleet.yml<\/code><\/pre>\n\n\n\n<p>Similarly, press Ctrl+c to stop Fleet server.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Create Fleet Systemd Service Unit on Rocky Linux<\/h4>\n\n\n\n<p>Once you have verified that Fleet is running fine, create a systemd service file, <strong><code>\/etc\/systemd\/system\/fleet.service<\/code><\/strong>. You can use any method shown above to specify the flags for <code><strong>ExecStart <\/strong><\/code>option while creating the systemd service unit file.<\/p>\n\n\n\n<p>Example of Fleet systemd service unit file with Flags specified in &#8216;cli&#8217; like format.<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>cat &gt; \/etc\/systemd\/system\/fleet.service &lt;&lt; 'EOL'\n[Unit]\nDescription=Fleet Osquery Fleet Manager\nAfter=network.target\n\n[Service]\nLimitNOFILE=8192\nExecStart=\/usr\/local\/bin\/fleet serve \\\n  --mysql_address=127.0.0.1:3306 \\\n  --mysql_database=fleetdb \\\n  --mysql_username=fleetadmin \\\n  --mysql_password=StrongP@SS \\\n  --redis_address=127.0.0.1:6379 \\\n  --server_cert=\/etc\/ssl\/certs\/fleet.cert \\\n  --server_key=\/etc\/ssl\/certs\/fleet.key \\\n  --logging_json\nExecStop=\/bin\/kill -15 $(ps aux | grep \"fleet serve\" | grep -v grep | awk '{print$2}')\n\n[Install]\nWantedBy=multi-user.target\nEOL\n<\/code><\/pre>\n\n\n\n<p>The method I preferred myself is to use the configuration file instead. The below service file uses the configuration file with Fleet flags defined as shown <a class=\"rank-math-link\" href=\"https:\/\/kifarunix.com\/install-fleet-osquery-manager-on-ubuntu\/#config-file\">above<\/a>.<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>cat &gt; \/etc\/systemd\/system\/fleet.service &lt;&lt; 'EOL'\n[Unit]\nDescription=Fleet Osquery Fleet Manager\nAfter=network.target\n\n[Service]\nLimitNOFILE=8192\nExecStart=\/usr\/local\/bin\/fleet serve -c \/etc\/fleet\/fleet.yml\nExecStop=\/bin\/kill -15 $(ps aux | grep \"fleet serve\" | grep -v grep | awk '{print$2}')\n\n[Install]\nWantedBy=multi-user.target\nEOL\n<\/code><\/pre>\n\n\n\n<p>Reload systemd configurations.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl daemon-reload<\/code><\/pre>\n\n\n\n<p>Start and enable Fleet service.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl enable --now fleet<\/code><\/pre>\n\n\n\n<p>Check the status;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl status fleet<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>\u25cf fleet.service - Fleet Osquery Fleet Manager\n     Loaded: loaded (\/etc\/systemd\/system\/fleet.service; enabled; vendor preset: disabled)\n     Active: active (running) since Mon 2022-09-26 22:37:03 EAT; 6s ago\n   Main PID: 3267 (fleet)\n      Tasks: 6 (limit: 5891)\n     Memory: 25.1M\n        CPU: 115ms\n     CGroup: \/system.slice\/fleet.service\n             \u2514\u25003267 \/usr\/local\/bin\/fleet serve -c \/etc\/fleet\/fleet.yml\n\nSep 26 22:37:03 localhost.localdomain systemd[1]: Started Fleet Osquery Fleet Manager.\nSep 26 22:37:03 localhost.localdomain fleet[3267]: Using config file: \/etc\/fleet\/fleet.yml\nSep 26 22:37:03 localhost.localdomain fleet[3267]: {\"component\":\"redis\",\"level\":\"info\",\"mode\":\"standalone\",\"ts\":\"2022-09-26T19:37:03.676154019Z\"}\nSep 26 22:37:03 localhost.localdomain fleet[3267]: {\"component\":\"crons\",\"cron\":\"vulnerabilities\",\"level\":\"info\",\"periodicity\":\"1h0m0s\",\"ts\":\"2022-09-26T19:37:03.715447014Z&gt;\nSep 26 22:37:03 localhost.localdomain fleet[3267]: {\"level\":\"info\",\"msg\":\"metrics endpoint disabled (http basic auth credentials not set)\",\"ts\":\"2022-09-26T19:37:03.723192&gt;\nSep 26 22:37:03 localhost.localdomain fleet[3267]: {\"address\":\"0.0.0.0:8080\",\"msg\":\"listening\",\"transport\":\"https\",\"ts\":\"2022-09-26T19:37:03.723452863Z\"}\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Access Fleet Web Interface<\/h3>\n\n\n\n<p>Fleet can be accessed on the browser using the URL&nbsp;<strong>https:\/\/&lt;server-IP_OR_hostname&gt;:8080<\/strong>.<\/p>\n\n\n\n<p>If firewall is running, open this port to allow external access;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>firewall-cmd --add-port=8080\/tcp --permanent\nfirewall-cmd --reload<\/code><\/pre>\n\n\n\n<p>Then access Fleet Web interface from browser. and proceed to finalize the setup of Fleet Osquery manager on Rocky Linux;<\/p>\n\n\n\n<p>Create the admin user;<\/p>\n\n\n\n<div><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-create-account.png\" class=\"td-modal-image\"><figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1895\" height=\"909\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-create-account.png\" alt=\"Install Fleet Osquery Manager on Rocky Linux\" class=\"wp-image-14142\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-create-account.png?v=1664221380 1895w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-create-account-768x368.png?v=1664221380 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-create-account-1536x737.png?v=1664221380 1536w\" sizes=\"(max-width: 1895px) 100vw, 1895px\" \/><\/figure><\/a><\/div>\n\n\n\n<p>Enter your organization details, Name and url to logo.<\/p>\n\n\n\n<div><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-organization-details.png\" class=\"td-modal-image\"><figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1873\" height=\"815\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-organization-details.png\" alt=\"Install Fleet Osquery Manager on Rocky Linux\" class=\"wp-image-14145\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-organization-details.png?v=1664221453 1873w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-organization-details-768x334.png?v=1664221453 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-organization-details-1536x668.png?v=1664221453 1536w\" sizes=\"(max-width: 1873px) 100vw, 1873px\" \/><\/figure><\/a><\/div>\n\n\n\n<p>Set the Fleet server URL.<\/p>\n\n\n\n<div><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-url.png\" class=\"td-modal-image\"><figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1860\" height=\"749\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-url.png\" alt=\"Install Fleet Osquery Manager on Rocky Linux\" class=\"wp-image-14144\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-url.png?v=1664221421 1860w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-url-768x309.png?v=1664221421 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-url-1536x619.png?v=1664221421 1536w\" sizes=\"(max-width: 1860px) 100vw, 1860px\" \/><\/figure><\/a><\/div>\n\n\n\n<p>Submit the details and proceed to Fleet web interface.<\/p>\n\n\n\n<div><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-dashboard.png\" class=\"td-modal-image\"><figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1917\" height=\"652\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-dashboard.png\" alt=\"Install Fleet Osquery Manager on Rocky Linux\" class=\"wp-image-14135\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-dashboard.png?v=1664216524 1917w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-dashboard-768x261.png?v=1664216524 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/09\/fleet-dashboard-1536x522.png?v=1664216524 1536w\" sizes=\"(max-width: 1917px) 100vw, 1917px\" \/><\/figure><\/a><\/div>\n\n\n\n<p>And that marks the end of our tutorial on how to installation of Fleet Osquery Manager on Rocky Linux. In our next tutorial, you will learn how to enroll Osquery agents to Fleet manager.<\/p>\n\n\n\n<p><a aria-label=\" (opens in a new tab)\" class=\"rank-math-link\" href=\"https:\/\/kifarunix.com\/enroll-osquery-hosts-on-fleet-manager\/\" target=\"_blank\" rel=\"noreferrer noopener\">How to Enroll Osquery Hosts on Fleet Manager<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-and-enroll-elastic-agents-to-fleet-manager-in-linux\/\" target=\"_blank\" rel=\"noreferrer noopener\">Install and Enroll Elastic Agents to Fleet Manager in Linux<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this tutorial, you will learn how to install Fleet osquery manager on Rocky Linux. According to its Github repository, &#8220;Fleet is the most widely<\/p>\n","protected":false},"author":1,"featured_media":8371,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[72,121,34],"tags":[5853,5851,5850,5852,5854],"class_list":["post-14141","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-monitoring","category-howtos","category-security","tag-fleet-manager","tag-install-fleet-manager-rocky-linux","tag-install-fleet-osquery-manager-on-rocky-linux","tag-install-fleet-rocky-linux","tag-osquery-rocky-linux","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/14141"}],"collection":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/comments?post=14141"}],"version-history":[{"count":7,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/14141\/revisions"}],"predecessor-version":[{"id":20615,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/14141\/revisions\/20615"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media\/8371"}],"wp:attachment":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media?parent=14141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/categories?post=14141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/tags?post=14141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}