thomaseldredge
03/24/2021, 1:14 PMbenbass
03/24/2021, 6:05 PMthomaseldredge
03/24/2021, 6:29 PMthomaseldredge
03/24/2021, 7:15 PMBrandon
03/25/2021, 12:18 AMsave enroll failed: host identified by 1234123-1234-1234-1234-C3C04F373533 enrolling too often
Also, seeing
authentication error: missing node key
and
enroll failed: no matching secret found
and finally
failed to mark host seen: marking host seen: Error 1205: Lock wait timeout exceeded; try restarting transaction
Brandon
03/25/2021, 2:41 PMno matching secret found
? This is my number 2 biggest errjsanchez
03/26/2021, 5:12 PM/var/log/osquery
for bot result.log and status.log. I was using the old environment variables from Kolide, but I recently changed them to match what is shown in the Fleetdm 3.9 doc's since I recently upgraded to that version.Artem
03/29/2021, 4:01 PMzwass
Dan Achin
03/29/2021, 5:17 PMthomaseldredge
03/29/2021, 5:29 PMkoba
03/30/2021, 12:16 PMmysqldump
to dump the data from old DB to new one but when i try to access new fleet instance I get a 500 error for what looks like for all the api endpoints.SK
03/30/2021, 12:18 PM--osquery_host_identifier=instance
in 3.9.0? We started using it but normally we have around 6k systems and it is already now at almost 60k, I already changed the Host Expiry Window
to 1 day, but it is still accumulating. It seems to happen to at least Osquery v4.1.2 and v4.2.0, it creates 100+ entries for same system and if I look at "Last Seen" it looks like it creates a new entry every 5 minutes. Has anyone else noticed this behavior? It happens on different kinds of systems some VM and Laptops.arod
03/31/2021, 1:38 PMBrandon
03/31/2021, 7:14 PMhilt
04/01/2021, 2:43 AM/usr/sbin/agetty;5fae0533
in the path column from the processes table on linux? specifically the 5fae
bit is confusing - how can a process have multiple binaries?Artem
04/02/2021, 2:45 PMDan Achin
04/02/2021, 9:28 PMarod
04/02/2021, 10:21 PMdocker logs <container>
Error creating db connection: Error 1045: Access denied for user 'fleet'@'172.23.0.4' (using password: YES)
Using config file: /etc/kolide.yml
Artem
04/05/2021, 3:15 PMkoba
04/06/2021, 7:17 PMSELECT * FROM osquery_info
). Has anyone else face this issue? Am I doing something wrong?benbass
04/06/2021, 8:48 PMarod
04/07/2021, 1:55 PMdocker-compose.yml
file
Here is the fleet section. I have mysql and redis as well. Could really use some help in our current setup.
THREADING so I don't clog up the channelHello_There
04/07/2021, 2:40 PMarod
04/07/2021, 7:00 PMproxx
04/07/2021, 10:46 PMArtem
04/08/2021, 10:36 AMconfig:
targets:
labels:
- my labels
arod
04/08/2021, 2:52 PMBrandon
04/08/2021, 5:25 PM/settings/osquery
web endpoint... Does a system check config everytime it sends data or do you have to configure this somewhere? Currently, we do change control of osquery configuration outside of fleet and if this works as I imaging then I can just have this be the source of truth for all osquery deployments in my environment.demonbhao
04/09/2021, 10:42 AM