why does osquery only record things that happen if...
# generalc
Carl
05/08/2020, 4:34 PMwhy does osquery only record things that happen if i run kitchen converge (vagrant back end) twice? (kitchen exec fails, kitchen login works but must be done manually, adding exec or bash to the recipe only works if i run converge twice) #beyondConfused
s
seph
05/08/2020, 4:46 PM
I don’t understand this question. What does test kitchen have to do with osquery? How is this machine configured? What do you expect to happen?
c
Carl
05/08/2020, 5:15 PMim trying to construct a system where i can test alerts within my fleet manager by building a chef configuration
Carl
05/08/2020, 5:15 PM(vagrant is the backend)
Carl
05/08/2020, 5:15 PMthe vm currently registers just fine but when the script i wrote to trigger the test alert runs, nothing happens, i have to run kitchen converge "twice"
s
seph
05/08/2020, 5:37 PM
This sounds more like a test kitchen question than an osquery question.
seph
05/08/2020, 5:37 PM
osquery is a daemon. It does daemon things. I can’t speak to how test kitchen provisions it. There’s a lot of complexity hiding in kitchen
3 Views