I'm struggling with using Fleet to get the accurat...
# fleetj
James Wilburn
06/07/2023, 9:11 PMI'm struggling with using Fleet to get the accurate versions of programs. Example, As is appears the version returned by Select * from rpm_packages; would say the version is 4.1 based off the yum package installed, if I run "/opt/nessus_agent/sbin/nessuscli -v" on the same server I would see it's been updated to 4.3. It's the closest I've come to being able to track current versions. Same results from the Software Inventory route, it doesn't show actual version either, just what it see's on the installation package. Anyone know a work around? Only Fleet (Orbit) appears to be accurate.
z
zwass
06/07/2023, 9:44 PM
Sounds like you have something doing updates with a mechanism besides installing a newer RPM? Fleet (osquery) is picking up the RPM installation data.
j
James Wilburn
06/07/2023, 10:08 PMExactly. So is there a way to push the command, /opt/nessus_agent/sbin/nessuscli -v, to get accurate info via a query in Fleet?
James Wilburn
06/07/2023, 10:12 PMAnd then, it would be whatever the command is "plug and play" for the particular program for other programs
James Wilburn
06/07/2023, 10:22 PMEven an issue with Orbit
z
zwass
06/08/2023, 1:04 AM
You could write an osquery extension table that would call that and expose the info.
j
James Wilburn
06/08/2023, 11:03 AMAwesome, I'll find a youtube or some kind of instructions for that. Thanks