Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
t
Tor Houghton
02/02/2022, 12:29 PMI think I may have found a bug (in 4.9.0). I have a hostname called "vr.home.bogus.net" which appears in the list of hosts, but I am not able to do a specific queries for this host (when I type in the hostname or indeed the fqdn, it does not appear in the list (though the UI will suggest other hosts)).
t
Tomas Touceda
02/02/2022, 1:21 PMhi there! sorry hear you're having issues. Is the bug that you cannot seem to select this host to do a live query against? or that when you do, it fails?
t
Tor Houghton
02/02/2022, 2:36 PMit doesn't show up in the suggestions when you search đ
Queries v Hosts
t
Tomas Touceda
02/02/2022, 2:43 PMthe tool we use to search underneath in some cases has a lower limit of 3 chars, does it work if you search for
vr.ht
Tor Houghton
02/02/2022, 2:51 PMThat's the thing; nothing shows up at all until I type "vr.hom" -- and then the "vr" host is left out of the results đ
t
Tomas Touceda
02/02/2022, 3:20 PMwill look into it and keep you posted, thank you for mentioning the issue!
đ 1
I can't reproduce quickly, gonna create an issue shortly. if you search for the exact host, does it appear then? sometimes if you search for things that match many hosts, those might "kick off" the host you are expecting from the list
t
Tor Houghton
02/02/2022, 3:27 PMNope!
t
Tomas Touceda
02/02/2022, 3:29 PMis this host in a team? what role is the user you are testing this with?
t
Tor Houghton
02/02/2022, 3:29 PMIf I have time later I can try to recreate with a different (short) host name. I am just using the default "admin" user. And it is not part of any team.
I have a few three-letter hosts that show up fine, btw.
t
Tomas Touceda
02/02/2022, 3:33 PMn
Noah Talerman
02/02/2022, 3:38 PM@Tor Houghton if youâre able, can you please send a screenshot of the request and response for of the
/targetst
Tor Houghton
02/16/2022, 7:37 PMThis is the request payload (raw):
{"query":"vr.","query_id":158,"selected":{"hosts":[],"labels":[],"teams":[]}}
This is the response (raw):
{
"targets": {
"hosts": [],
"labels": [
{
"created_at": "2021-11-22T08đ29Z",
"updated_at": "2021-11-22T08đ29Z",
"id": 6,
"name": "All Hosts",
"description": "All hosts which have enrolled in Fleet",
"query": "select 1;",
"platform": "",
"label_type": "builtin",
"label_membership_type": "dynamic",
"host_count": 32,
"display_text": "All Hosts",
"count": 32
}
],
"teams": []
},
"targets_count": 0,
"targets_online": 0,
"targets_offline": 0,
"targets_missing_in_action": 0
}
When I enter "vr.hom":
{"query":"vr.hom","query_id":158,"selected":{"hosts":[],"labels":[],"teams":[]}}
I get a response that contains lots of hosts (400-odd lines of JSON).
Does this help?
(I am on 4.10 now, by the way.)
n
Noah Talerman
02/16/2022, 8:00 PMYes, thank you! I added this information to the bug report issue here: https://github.com/fleetdm/fleet/issues/3979
I get a response that contains lots of hosts (400-odd lines of JSON).This response does not include the host youâre looking for, correct?
t
Tor Houghton
02/16/2022, 8:08 PMThat's correct. And I added another two-character named host just to make sure and neither one show up.
It's quite strange though. If I search for "so.hom", that host shows up in the list of results, but if I search "vr.hom", it doesn't -- but the so.hom host does:
n
Noah Talerman
02/16/2022, 8:30 PMYeah thatâs unexpected. Sorry youâre still experiencing this issue. The Fleet team will likely resolve this issue in the upcoming release of Fleet.
Also, thanks for the additional info. Please feel free to add any more screenshots/comments in the following issue: https://github.com/fleetdm/fleet/issues/3979
t
Tor Houghton
02/16/2022, 8:42 PMHey, don't be sorry -- I'm glad you guys want my input đ
(And hopefully you're able to recreate it đ
n
Noah Talerman
02/16/2022, 8:48 PMPlease keep the input coming! Whether itâs in the form of a bug report, feature request, or something else.
hopefully youâre able to recreate itLooks like we were able to recreate the issue in a Loom video included in a comment here: https://github.com/fleetdm/fleet/issues/3979#issuecomment-1029253132
đ 1