Fleet should show queries as denylisted on the host details page #24208
Labels
#g-endpoint-ops
Endpoint ops product group
:product
Product Design department (shows up on 🦢 Drafting board)
Problem
A prospect wasn't getting results for scheduled queries and we didn't know why (#23465).
We found out during troubleshooting (on the device) that one of the scheduled queries was denylisted and was causing osquery to crash and not send results (watchdog was also turned off).
Potential solutions
Fleet currently has a
denylisted
field in its DB and we are currently not using it.Fleet should surface on the host details page when a scheduled query is denylisted, something like this:
PS: So we just need a few code changes on backend and frontend, but no migration is needed.
The text was updated successfully, but these errors were encountered: