https://github.com/osquery/osquery logo
Title
h

harveywells

07/27/2020, 5:26 PM
🌊 I’m excited about the Fleet 3.0 release but I’m trying to think about where the data in
network_interfaces
might be used that I’m not thinking of before upgrading. I’ve seen it when a host first enrolls with Fleet but otherwise we’re not intentionally using that elsewhere. How were folks using that data prior to the new release?
h

harveywells

07/27/2020, 5:32 PM
👋 @zwass. Yup I was reading through that.
So is that data returned every time a host checks in with the Fleet server?
And when navigating the Fleet UI
z

zwass

07/27/2020, 5:44 PM
The data was stored in the DB and returned by the API, but never presented to the user.
h

harveywells

07/27/2020, 5:44 PM
👍
z

zwass

07/27/2020, 5:48 PM
To clarify that: The primary IP and MAC are presented to the user in the host dashboard. These continue to be presented in Fleet 3.0. For the vast majority of users there is no apparent change. For the small minority that used the data (by consuming from the API or directly from the DB) they can get equivalent data using the additional query functionality.
h

harveywells

07/27/2020, 5:49 PM
We’re not interacting with the API or DB directly so we’re in the clear.
👍 1
Thanks @zwass