Hey! Good afternoon everyone! I have a Daemon requ...
# general
j
Hey! Good afternoon everyone! I have a Daemon requesting config on and endpoint using the
--config_endpoint
. Does anyone has the response payload I need to respond to the daemon? I want to pass flags to the daemon and the docs only show how to schedule queries.
I am passing this payload:
Copy code
{
  "decorators": {
    "load": [
      "SELECT uuid AS host_uuid FROM system_info;",
      "SELECT hostname AS hostname FROM system_info;"
    ]
  },
  "schedule": {
    "0002_all_os_version": {
      "query": "SELECT name FROM programs;",
      "interval": 10
    },
    "options": {
      "pack_delimiter": "/",
      "buffered_log_max": 1,
      "distributed_tls_max_attempts": 10,
      "logger_tls_period": 10
    }
  }
}
ugh that looks ugly
z
The payload would be the exact same as the osquery config you put in a file. What you have there looks correct at a glance.