nyanshak
12/08/2019, 7:15 PMdisable_distributed
to true
seph
12/09/2019, 2:43 AMSeren
12/09/2019, 3:07 AMnyanshak
12/09/2019, 3:43 PMzwass
12/09/2019, 5:31 PMseph
12/09/2019, 5:41 PMSeren
12/09/2019, 5:49 PMzwass
12/09/2019, 5:52 PMSeren
12/09/2019, 5:55 PMseph
12/09/2019, 5:59 PMSeren
12/09/2019, 5:59 PMseph
12/09/2019, 5:59 PMzwass
12/09/2019, 6:01 PMSeren
12/09/2019, 6:01 PMzwass
12/09/2019, 6:02 PMSeren
12/09/2019, 6:03 PMosqueryd --host_identifier=$(scutil --get ComputerName) --verbose --allow_unsafe --tls_hostname=<http://fleet.globus.org:443|fleet.globus.org:443> --tls_server_certs=/etc/osquery/globus_osquery.crt --enroll_secret_path=/etc/osquery/globus_osquery_secret --enroll_tls_endpoint=/api/v1/osquery/enroll --config_plugin=tls --config_tls_endpoint=/api/v1/osquery/config --config_refresh=60 --disable_distributed=false --logger_plugin=tls --logger_tls_endpoint=/api/v1/osquery/log --logger_tls_period=60 --distributed_tls_read_endpoint=/api/v1/osquery/distributed/read --distributed_tls_write_endpoint=/api/v1/osquery/distributed/write
Table fields that differ:
MySQL [kolide]> select id, platform, primary_ip_id, config_tls_refresh, uptime from hosts;
+----+----------+---------------+--------------------+--------+
| id | platform | primary_ip_id | config_tls_refresh | uptime |
+----+----------+---------------+--------------------+--------+
| 11 | darwin | NULL | 0 | 0 |
+----+----------+---------------+--------------------+--------+
1 row in set (0.00 sec)
With launcher (LQ disabled):
build/launcher --hostname <http://testfleet.globus.org:443|testfleet.globus.org:443> --enroll_secret 'xEXAMPLExEXAMPLE' --root_pem=/etc/osquery/globus_osquery.crt --osqueryd_path=/usr/local/bin/osqueryd --root_directory ~/.osquery --debug
Fields that differ:
MySQL [kolide]> select id, platform, primary_ip_id, config_tls_refresh, uptime from hosts;
+----+----------+---------------+--------------------+-----------------+
| id | platform | primary_ip_id | config_tls_refresh | uptime |
+----+----------+---------------+--------------------+-----------------+
| 12 | darwin | 109 | 300 | 917500000000000 |
+----+----------+---------------+--------------------+-----------------+
| id | osquery_host_id | created_at | updated_at | deleted_at | deleted | detail_update_time | node_key | host_name | uuid | platform | osquery_version | os_version | build | platform_like | code_name | uptime | physical_memory | cpu_type | cpu_subtype | cpu_brand | cpu_physical_cores | cpu_logical_cores | hardware_vendor | hardware_model | hardware_version | hardware_serial | computer_name | primary_ip_id | seen_time | distributed_interval | logger_tls_period | config_tls_refresh |
| 25 | ip-192-168-86-26.ec2.internal | 2019-12-09 18:13:22 | 2019-12-09 18:17:24 | NULL | 0 | 1970-01-02 00:00:00 | 1k17AggNWIxQgBTvfRyBs0mLYQHKHsgo | ip-192-168-86-26.ec2.internal | A61DC7D2-0C6D-56B9-92A5-REDACTED | darwin | 4.1.1 | Mac OS X 10.14.6 | 18G1012 | darwin | | 0 | 17179869184 | x86_64h | Intel x86-64h Haswell | Intel(R) Core(TM) i7-6567U CPU @ 3.30GHz | 2 | 4 | Apple Inc. | MacBookPro13,2 | 1.0 | redacted-serial | mylaptopname-current | NULL | 2019-12-09 18:17:25 | 10 | 10 | 0 |
| 26 | d3bc7341-f65e-4df5-a9a6-f26c7fe42c1e | 2019-12-09 18:13:47 | 2019-12-09 18:14:47 | NULL | 0 | 1970-01-02 00:00:00 | Ux8TA4D2yF9bnNcNFIzCOFTZg2KI0uwx | | | | | | | | | 0 | 0 | | | | 0 | 0 | | | | | | NULL | 2019-12-09 18:14:48 | 10 | 10 | 0 |
zwass
12/09/2019, 6:24 PMSeren
12/09/2019, 6:26 PM