Mystery Incorporated
07/31/2021, 4:23 PMMystery Incorporated
08/01/2021, 4:44 AMMystery Incorporated
08/01/2021, 11:16 AMosquery_detail_update_interval: 25m
the refetch rate doesn't seem to change is that expected or not? it's not clear.Mystery Incorporated
08/01/2021, 12:59 PMJason NG
08/02/2021, 2:58 AMMadhur Jodhwani
08/02/2021, 4:41 AMJason NG
08/02/2021, 6:23 AMKun Nan
08/02/2021, 8:08 AMSilvano Ngacha
08/02/2021, 9:40 AMfleetctl login
is throwing an error:
Login failed: POST /api/v1/fleet/login: Post "<https://localhost:8080/api/v1/fleet/login>": x509: certificate is not valid for any names, but wanted to match localhost
Mystery Incorporated
08/02/2021, 2:08 PMMystery Incorporated
08/02/2021, 2:13 PMmake build
just fails, go is fine as I can build the oauth2-proxy projectMystery Incorporated
08/02/2021, 2:32 PMMystery Incorporated
08/02/2021, 2:47 PMMystery Incorporated
08/02/2021, 2:55 PMJocelyn Bothe
08/02/2021, 5:14 PMYash Boura
08/03/2021, 4:34 AMKun Nan
08/03/2021, 6:52 AMryan
08/03/2021, 2:30 PMBacarus
08/04/2021, 10:04 AM---
apiVersion: v1
kind: query
spec:
name: osquery_schedule
description: Report performance stats for each file in the query schedule.
query: select name, interval, executions, output_size, wall_time, (user_time/executions) as avg_user_time, (system_time/executions) as avg_system_time, average_memory, last_executed from osquery_schedule;
---
apiVersion: v1
kind: query
spec:
name: osquery_info
description: A heartbeat counter that reports general performance (CPU, memory) and version.
query: select i.*, p.resident_size, p.user_time, p.system_time, time.minutes as counter from osquery_info i, processes p, time where p.pid = i.pid;
---
apiVersion: v1
kind: query
spec:
name: osquery_events
description: Report event publisher health and track event counters.
query: select name, publisher, type, subscriptions, events, active from osquery_events;
using the command: fleetctl.exe apply -f queries.yml
it applies only the first query (osquery_schedule) but not the others.
Am I doing something wrong?Artem
08/04/2021, 12:53 PMBacarus
08/04/2021, 1:34 PM--logger_rotate_size
and --logger_rotate_max_files
, are they related to this use case or are they only for the filesystem logging plugin?Fred Koch
08/05/2021, 2:58 PMSaulo Guilhermino
08/05/2021, 6:32 PMryan
08/05/2021, 6:53 PMFailed enrollment request to <https://servername/api/v1/osquery/enroll> (Request error: certificate verify failed) retrying (I removed the servername)
Mystery Incorporated
08/07/2021, 6:33 AMKun Nan
08/09/2021, 3:09 AMKun Nan
08/09/2021, 3:24 AMMystery Incorporated
08/09/2021, 4:33 AMm s
08/09/2021, 10:45 AMBacarus
08/09/2021, 10:59 AMmake deps
fails because yarn is not found.
npm install -g yarn
is necessary, maybe you should put this the doc