Hey folks, I'm writing a carve endpoint for our os...
# tlsa
Andre Pinter
09/27/2022, 8:49 PMHey folks, I'm writing a carve endpoint for our osquery server, but I'm confused on the format I should be returning errors to the client in. Any pointers here? I've been reading through the docs trying to find the answer too
Andre Pinter
09/27/2022, 8:56 PMI'm pretty sure it should just be
{"message":"a message","status":1}z
zwass
09/27/2022, 9:13 PM
That sounds about right.
a
Andre Pinter
09/27/2022, 10:17 PMOkay, I'm still a bit lost here. I'm expecting https://github.com/osquery/osquery/blob/master/osquery/carver/carver.cpp#L220 to log something when my server returns an error code of 500 and a body like above w/ a json content type
Andre Pinter
09/27/2022, 10:17 PMand i have verbose on
Andre Pinter
09/27/2022, 10:18 PMthe client seems to not return when i expect and instead hits https://github.com/osquery/osquery/blob/master/osquery/carver/carver.cpp#L322
13 Views