https://github.com/osquery/osquery logo
Powered by
Title
g

groob

11/14/2018, 9:08 PM
idk what you mean by “hang”
r

Ralph23

11/14/2018, 9:21 PM
when a query is made in kolide it never returns a signal
it just goes on till it eventually stops
when i run the process there all the information looks normal
to make matters worse, osquery does not do any logs
g

groob

11/14/2018, 9:24 PM
you’ll need to give more data
is this only some queries, any queries, a specific query?
and live query are not shown in logs, you should only expect them in the browser
r

Ralph23

11/14/2018, 9:26 PM
that would be a typical behavior but that is not the case
the square book just goes in circle
i have tried two endpoints and still the same problem
g

groob

11/14/2018, 9:29 PM
is redis up?
r

Ralph23

11/14/2018, 9:32 PM
no it was not
just check
you are right redis was the problem
man you are good
g

groob

11/14/2018, 9:33 PM
fleet has a 
/healthz
endpoint that will return a 500 error when redis or mysql are down. you should alert on it
r

Ralph23

11/14/2018, 9:34 PM
where would i see that error
g

groob

11/14/2018, 9:34 PM
in the http response
well the response will be either 500 or 200
if it’s 500 the server logs will tell you why
r

Ralph23

11/14/2018, 9:35 PM
not none of that
*nope
how would be able to fix the issue of no logging
from the end point
i have this as my config --logger_path=C:\programeData
not C:\ProgramData\osquery\log
#generalJoin Slack
Powered by