Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
r
ryan
04/08/2022, 3:22 AMHi everyone 👋 I just upgraded from fleet
3.12.04.12.1500: Oh, something went wrong. Please file an issue if you believe this is a bug.fleetctl get queries --yamlSyntax error found near Column Identifier (WHERE Clause)"SyntaxError: Syntax error found near Column Identifier (WHERE Clause)
at C (<https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:31:485195>)
at parse (<https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:31:488961>)
at o (<https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:31:413777>)
at <https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:40:868794>
at Bm (<https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:40:868880>)
at sg (<https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:40:876544>)
at <https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:40:877013>
at Array.map (<anonymous>)
at <https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:40:877006>
at Object.po [as useMemo] (<https://fleet.quiq.sh/assets/bundle-81aa769e462f09d14dc5.js:48:61567>)"happy to gather more information if that's helpful or I can file a github issue
Looks like that error is coming from this js module: https://www.npmjs.com/package/sqlite-parser
Let me know if you have any ideas, or a way to see which of my queries it doesn't like.
s
Stephan M
04/08/2022, 4:40 AMNot sure if it's the same issue but we recently ran into this as well and it was because one of our queries had a syntax error. This was gracefully handled in the past but with the latest version of fleet results in a 5xx. We also found that fleetctl will let you add a query with invalid syntax which then makes the UI fail. We removed the broken query from the queries table in the DB
:ty: 2
r
ryan
04/08/2022, 5:37 AMwe have 300 queries any good way to narrow it down?
t
Tomas Touceda
04/08/2022, 2:13 PMhi ryan! sorry to hear you're having an issue with fleet. We are going to be looking into it
r
ryan
04/08/2022, 2:20 PMSounds great, thanks @Tomas Touceda! Let me know if you need any other information from me.
👍 1
l
Luke Heath
04/08/2022, 2:34 PM@Stephan M Thanks for letting us know! I will look into this.