abraham linkolan06/15/2021, 11:00 AM
Kelvin06/15/2021, 11:54 AM
Silvano Ngacha06/16/2021, 5:54 AM
I0615 15:16:19.983693 17433 tls.cpp:255] TLS/HTTPS POST request to URI: <https://172.27.63.225:8412/api/v1/osquery/enroll> W0615 15:16:20.030148 17433 tls_enroll.cpp:77] Failed enrollment request to <https://172.27.63.225:8412/api/v1/osquery/enroll> (Request error: certificate verify failed) retrying...
Remington Winters06/16/2021, 11:15 PM
arod06/17/2021, 6:50 PM
spookerlabs06/18/2021, 12:40 AM
consider JOINing against the users table
defensivedepth06/21/2021, 5:01 PM
is never filled with the host I am selecting.... Tried it on FF & Chrome, same issue. May be related / fixed with this? https://github.com/fleetdm/fleet/issues/993
Ahmed06/21/2021, 6:02 PM
i noticed that they have the same node_key, and UUID, what would be the solution for this ?
/usr/bin/osqueryd --flagfile /etc/osquery/osquery.flags --verbose --tls_dump
Silvano Ngacha06/21/2021, 7:57 PM
Mystery Incorporated06/22/2021, 5:23 PM
Remington Winters06/22/2021, 10:48 PM
Mystery Incorporated06/23/2021, 1:41 AM
2021/06/23 11:41:36 http: TLS handshake error from x.x.x.x:52295: local error: tls: bad record MAC
ehrhardt06/23/2021, 6:53 PM
Mystery Incorporated06/24/2021, 1:37 AM
Mystery Incorporated06/24/2021, 7:29 AM
Mystery Incorporated06/24/2021, 11:09 AM
RyanMcG06/24/2021, 3:40 PM
Anoop K V06/24/2021, 3:43 PM
Mystery Incorporated06/25/2021, 4:34 AM
Ayan06/25/2021, 7:12 PM
flags with osquery agents shows that the connection is stable and the agents are able to communicate properly 3. the db is working fine and is reflecting latest
in the hosts table 4. packet capture shows consistent data exchange between mysql server and the affected fleetdm servers.
wtheaker06/25/2021, 10:51 PM
. Maybe api requests with an
header, but fail authentication should get back a different error saying invalid credentials. I'm guessing most people would double check their api token after getting the current response though.
Mystery Incorporated06/27/2021, 4:14 AM
user06/28/2021, 3:20 PM
Ahmed06/29/2021, 2:27 PM
documentations but i couldn’t find. keeping osquery updated started to be a pain, and i wanted to test
which is really promising. is there any doc that get me started? how can i make the source of binaries to be internal rpm repo? because not all machines will reach out to internet, so i would need to host orbit, and osquery packages internally and install orbit for the first time and keep it in sync with the internal repo for any new packages.
Dan Achin06/30/2021, 5:54 PM
This started happening after we added the env variable to enable software inventory. However, reverting that change and restarting fleetd didn't resolve the issue. We had issues in several environments when upgrading from 3.9 to > 3.11 and I'm wondering if this env was somehow already broken and the service restart we just did finally tripped it. Would this error possibly be caused by an improper version upgrade - maybe the prepare db not being run?
list hosts: Error 1054: Unknown column 'additional' in 'field list'
Esteban07/01/2021, 11:33 AM
2021/07/01 11:29:41 FAIL 20210601000001_CreateTeamsTables.go (alter hosts: Error 1005: Can't create table `fleet`.`hosts` (errno: 121 "Duplicate key on write or update")), quitting migration.
mmilholland07/01/2021, 3:52 PM
Remington Winters07/01/2021, 7:06 PM
emmanuelbabalola07/02/2021, 12:37 AM