Zach Zeid
11/19/2020, 12:38 PMzwass
11/19/2020, 4:48 PMosquery_schedule
and output it in a format compatible with prometheus?Zach Zeid
11/19/2020, 4:50 PMosquery_schedule
zwass
11/19/2020, 5:01 PMI'm struggling to think how'd fleet would be able to ingest the data fromCan you expand on this?osquery_schedule
Ideally, I'd like to be able to pull those metrics from fleet itself, if fleet is going to be where I manage configs, packs, and hosts.This makes a lot of sense for Fleet. I'm definitely interested in hashing out how the info would best be exposed to users.
Zach Zeid
11/19/2020, 5:14 PMI'm struggling to think how'd fleet would be able to ingest the data fromosquery_schedule
Can you expand on this?I'm just not 100% on implementation, given that results can be sent to other systems that are not stdout, how would fleet be able to get the results of those queries in a way that's exposable as a metric.
osquery_schedule
be implicitly added to new rulepacks, and fleet could access it another way?zwass
11/19/2020, 5:17 PMosquery_schedule
there wouldn't be much of a benefit to the differential results provided by scheduled queries, so I think we could pull the data as live queries without much concern.Zach Zeid
11/19/2020, 5:22 PMzwass
11/19/2020, 5:28 PMosquery_schedule
table and would get the data for the schedule queries. It would be an implementation detail really.Zach Zeid
11/19/2020, 6:24 PMosquery_schedule
in the scheduled query packs to get the perf data of those scheduled queries.zwass
11/19/2020, 8:53 PM