Configure "New" and "Online" Label on Sidebar (hosts page) to be Selectable Target in Queries

kolide / fleet

A flexible control server for osquery fleets

https://kolide.com/fleet

MIT License

1.1k stars 261 forks source link

Configure "New" and "Online" Label on Sidebar (hosts page) to be Selectable Target in Queries #1164

Open FritzX6 opened 7 years ago

FritzX6 commented 7 years ago

Currently only user configured labels, OS labels and 'ALL HOSTS' can be specified as targets in the query builder.

Configure the following labels so that they can be selected from the Targets Dropdown:

[ ] New
[ ] ONLINE

murphybytes commented 7 years ago

@FritzX6 Wouldn't "All Hosts" and "Online" labels be the same? Labels are just a query that filters hosts that respond, so all hosts that respond would be the same as online hosts, right?

murphybytes commented 7 years ago

@FritzX6 I think I see what the problem is after our discussion. When you select a label like 'All Hosts' for query you get all the hosts that are 'online', meaning all the hosts that have responded to the Label query within the last 30 minutes. This behavior is currently internal to Kolide. I'll see if I can come up with a work around to get you what you want here.