Title
#general
j

Julian Scala

10/29/2020, 6:45 PM
Hey! Good afternoon everyone! I have a Daemon requesting config on and endpoint using the
--config_endpoint
. Does anyone has the response payload I need to respond to the daemon? I want to pass flags to the daemon and the docs only show how to schedule queries.
6:47 PM
I am passing this payload:
{
  "decorators": {
    "load": [
      "SELECT uuid AS host_uuid FROM system_info;",
      "SELECT hostname AS hostname FROM system_info;"
    ]
  },
  "schedule": {
    "0002_all_os_version": {
      "query": "SELECT name FROM programs;",
      "interval": 10
    },
    "options": {
      "pack_delimiter": "/",
      "buffered_log_max": 1,
      "distributed_tls_max_attempts": 10,
      "logger_tls_period": 10
    }
  }
}
6:47 PM
ugh that looks ugly
zwass

zwass

10/29/2020, 6:54 PM
The payload would be the exact same as the osquery config you put in a file. What you have there looks correct at a glance.