I have a host which is showing as online in the Ko...
# kolidej
Jon O'Brien
03/18/2019, 3:19 PMI have a host which is showing as online in the Kolide Fleet UI but any query against that host just keeps running without returning any results.
Any suggestions of where I can start to investigate the issue?
d
defensivedepth
03/18/2019, 4:00 PMCan you query other online hosts as expected?
j
Jon O'Brien
03/18/2019, 4:01 PMyes
Jon O'Brien
03/18/2019, 4:01 PM8 out of 8 hosts are shown online but only 7 of the hosts return any results from a simple query.
d
defensivedepth
03/18/2019, 4:05 PMYou are sure that this particular host should return data for the query? (Use something like this to be sure:
SELECT * FROM osquery_info;j
Jon O'Brien
03/18/2019, 4:06 PMyes
d
defensivedepth
03/18/2019, 4:12 PMI would take a look at osqueryd on the host.
4 Views