Hi, can anyone give some insight on osquery suppor...
# generalp
Priya Jagyasi
04/12/2024, 5:20 AMHi, can anyone give some insight on osquery support for language other than English. Example, I have my OS language as Spanish, then I run osquery and getting the output in Spanish.
Priya Jagyasi
04/12/2024, 6:22 AMosquery> .all logical_drives;
+-----------+---------+------------------+-------------+--------------+-------------+----------------+
| device_id | type | description | free_space | size | file_system | boot_partition |
+-----------+---------+------------------+-------------+--------------+-------------+----------------+
| C: | Unknown | Disco fijo local | 78378098688 | 106662506496 | NTFS | 1 |
| D: | Unknown | Disco CD-ROM | 0 | 4919504896 | UDF | 0 |
+-----------+---------+------------------+-------------+--------------+-------------+----------------+
Priya Jagyasi
04/12/2024, 6:22 AMThe description here is in Spanish
m
Mike Myers
04/12/2024, 6:22 PMosquery is returning string values from the underlying OS APIs, which is probably controlled by the language locale, which the osquery process inherits from its environment.
Mike Myers
04/12/2024, 6:32 PMAs far as I know you can change that language setting for the whole system or for a particular user, but not for a single process. One hack people have done is, create a new user, set their language to English, then use the
runasp
Priya Jagyasi
04/15/2024, 7:18 AMIn our application, osquery commands are run through a fixed/ defined user, is it possible to change the language to English for a user through command to run osquery or any other command?
m
Mike Myers
04/15/2024, 4:33 PMosquery cannot change the system or run commands, but if you had another ability to run a system command, it looks like you can change the OS language for just the user account that runs osquery. I have not tested it but there are two PowerShell commands:
Set-WinSystemLocaleSet-WinUserLanguageList15 Views