fleet-v4.39.0
Changes
-
Added ability to store results of scheduled queries:
- Will store up to 1000 results for each scheduled query.
- If the number of results for a scheduled query is below 1000, then the results will continuously get updated every time the hosts send results to Fleet.
- Introduced
server_settings.query_reports_disabled
field in global configuration to disable this feature. - New API endpoint:
GET /api/_version_/fleet/queries/{id}/report
. - New field
discard_data
added to API queries endpoints for toggling report storage for a query. For yaml configurations, usediscard_data: true
to disable result storage. - Enhanced osquery result log validation.
- NOTE: This feature enables storing more query data in Fleet. This may impact database performance, depending on the number of queries, their frequency, and the number of hosts in your Fleet instance. For large deployments, we recommend monitoring your database load while gradually adding new query reports to ensure your database is sized appropriately.
-
Added scripts tab and table for host details page.
-
Added support to return the decrypted disk encryption key of a Windows host.
-
Added
GET /hosts/{id}/scripts
endpoint to retrieve status details of saved scripts for a host. -
Added
mdm.os_settings
toGET /api/v1/hosts/{id}
response. -
Added
POST /api/fleet/orbit/disk_encryption_key
endpoint for Windows hosts to report bitlocker encryption key. -
Added activity logging for script operations (add, delete, edit).
-
Added UI for scripts on the controls page.
-
Added API endpoints for script management and updated existing ones to accommodate saved script ID.
-
Added
GET /mdm/disk_encryption/summary
endpoint for disk encryption summaries for macOS and Windows. -
Added
os_settings
andos_settings_disk_encryption
filters to variousGET
endpoints for host filtering based on OS settings. -
Enhanced
GET hosts/:id
API response to include more detailed disk encryption data for device client errors. -
Updated controls > disk encryption and host details page to include Windows bitlocker information.
-
Improved styling for host details/device user failing policies display.
-
Disabled multicursor editing for SQL editors.
-
Deprecated
mdm.macos_settings.enable_disk_encryption
in favor ofmdm.enable_disk_encryption
. -
Updated Go version to 1.21.3.
Bug fixes
-
Fixed script content and output formatting issues on the scripts detail modal.
-
Fixed a high database load issue in the Puppet match endpoint.
-
Fixed setup flows background not covering the entire viewport when resized to some sizes.
-
Fixed a bug affecting OS settings information retrieval regarding disk encryption status for Windows hosts.
-
Fixed SQL parameters used in the
/api/latest/fleet/labels/{labelID}/hosts
endpoint for certain query parameters, addressing issue 13809. -
Fixed Python's CVE-2021-42919 false positive on macOS which should only affect Linux.
-
Fixed a bug causing DEP profiles to sometimes not get assigned correctly to hosts.
-
Fixed an issue in the bulk-set of MDM Apple profiles leading to excessive placeholders in SQL.
-
Fixed max-height display issue for script content and output in the script details modal.
Upgrading
Please visit our update guide for upgrade instructions.
Documentation
Documentation for Fleet is available at fleetdm.com/docs.
Binary Checksum
SHA256
034e5829448a4d06442f983ee14ff82ed4d620933c473e51fc1bdc852d59571d fleetctl_v4.39.0_windows.zip
0f100db2daf7542ee03653f573148e058fcb2833997ec8a0293e50c772f6f87b fleetctl_v4.39.0_macos.tar.gz
42b2ce1a17eb90a5b57c9ddebcfe967393324ea8396e33bc02b2c20dd07143ac fleet_v4.39.0_linux.tar.gz
549e997efba2742543910193f1bbff03d42354c951f889a639f8e1e0df7ec54c fleetctl_v4.39.0_linux.zip
9ce3bcb6a0969ae8c255276297f38fa8c93cfa3debf8d3271217345d4a07c976 fleetctl_v4.39.0_windows.tar.gz
ba0e9853f13a40732449f67391258545ba34c17994df6723f9281205f825f576 fleetctl_v4.39.0_linux.tar.gz
bbaeab22b759aed727f047f2c2b2ea1078986d5b71ae6d648036cb2a972b9e80 fleetctl_v4.39.0_macos.zip