nyanshak
07/29/2020, 5:15 PMapplying labels: apply labels received status 500 Unknown Error: invalid LabelType: 1
^ already fixed in my environment, but would be nice to know about this in the upgrade guide, or have fleetctl offer to upgrade between formats.Zach Zeid
07/29/2020, 5:33 PMdefensivedepth
07/30/2020, 3:16 PMenroll_secret, enroll_secrets, enroll-secret, enroll-secrets
?Ryan
07/30/2020, 3:27 PMJosip
07/31/2020, 2:41 PMBrett Demetris
07/31/2020, 10:51 PMsanjaykcse
08/03/2020, 6:50 PMArtem
08/05/2020, 2:03 PMfritz
08/05/2020, 3:04 PMArtem
08/06/2020, 9:25 AMdefensivedepth
08/06/2020, 4:30 PMwindows_events
, but am getting the following errors in the W10 application logs:
caller=level.go:63 level=info caller=extension.go:494 err="sending string logs: writing logs: transport error sending logs: rpc error: code = Internal desc = grpc: error while marshaling: proto: field \"kolide.agent.LogCollection.Log.Data\" contains invalid UTF-8"
Any thoughts as to where to look next?sanjaykcse
08/08/2020, 6:38 PMPJ Meyer
08/11/2020, 1:08 PMGOOGLE_APPLICATION_CREDENTIALS
with a path to a service account key json?Cristhian Amaya
08/12/2020, 3:16 PMenroll
endpoint so I don't see them in the Kolide UI, but those hosts read the config from Kolide just fine and also send logs without any issues.
The installation is the same on many hosts and this behaviour only happens on some of them.
I've tried using the --tls_dump --verbose
flags to see if there was any pointer, but I didn't see any, there's no info about enrollment
Any ideas?sean.cavanaugh
08/12/2020, 7:57 PMdemonbhao
08/13/2020, 2:22 AMNorberto Garcia Marin
08/13/2020, 10:22 AMdemonbhao
08/13/2020, 10:22 AMdemonbhao
08/14/2020, 6:40 AMSaif Abulkhair
08/15/2020, 4:13 PMdefensivedepth
08/15/2020, 7:46 PMfleetctl get options
--> https://gist.github.com/defensivedepth/4bdcdaa29dca243267548539bb9b235b
I am seeing:
{"s":1,"f":"options.cpp","i":91,"m":"Cannot set unknown or invalid flag: enable_windows_events_publisher","h":"24D8FD7C-8AE0-411A-94DE-552134C73926","c":"Sat Aug 15 17:47:14 2020 UTC","u":1597513634}
{"s":1,"f":"options.cpp","i":91,"m":"Cannot set unknown or invalid flag: enable_windows_events_subscriber","h":"24D8FD7C-8AE0-411A-94DE-552134C73926","c":"Sat Aug 15 17:47:14 2020 UTC","u":1597513634}
These are new as of 4.4.0 - see this thread: https://osquery.slack.com/archives/C0FHNQ2N6/p1596132276274800
Am I referencing them wrong for Fleet? Or does Fleet need to be updated to support this change?binu
08/17/2020, 3:09 PMBJF
08/18/2020, 2:00 PMSal
08/18/2020, 6:30 PM################################################################################
# WARNING:
# Your Fleet database is missing required migrations. This is likely to cause
# errors in Fleet.
#
# Run `./fleet prepare db` to perform migrations.
################################################################################
Then when attempting to run the migration
################################################################################
# WARNING:
# This will perform Fleet database migrations. Please back up your data before
# continuing.
#
# Press Enter to continue, or Control-c to exit.
################################################################################
2020/08/18 18:11:49 FAIL 20200512120000_CreateTableEnrollSecrets.go (create enroll_secrets table: Error 1050: Table 'enroll_secrets' already exists), quitting migration.
Any help would be great.demonbhao
08/19/2020, 3:54 AMsanjaykcse
08/20/2020, 8:52 AMdemonbhao
08/20/2020, 10:37 AMZach Zeid
08/20/2020, 4:31 PMfilesystem
? One for results and another for status?Zach Zeid
08/20/2020, 6:52 PMZach Zeid
08/21/2020, 1:38 PMfleet serve
needs to reference the file somehow?