https://github.com/osquery/osquery logo
Title
j

Jon O'Brien

03/15/2019, 2:55 PM
Hi all, anyone seen this error before running
fleetctl
- we have been able to run
fleetctl login
fine, so unsure why the query would be failing:
$ fleetctl query --timeout 25m --query 'select name,version from os_version' --labels 'All Hosts' --exit
upgrade live query result websocket: Forbidden
$
z

zwass

03/15/2019, 3:01 PM
Looks like you have an LB or something that doesn’t support websockets.
j

Jon O'Brien

03/15/2019, 3:02 PM
it's not going through a LB - I setup /etc/hosts to point directly to one of the fleet servers
z

zwass

03/15/2019, 5:18 PM
Are you able to query via the web UI?
j

Jon O'Brien

03/15/2019, 5:24 PM
yes - the issue got resolved with permissions
z

zwass

03/15/2019, 7:03 PM
What permissions did you modify? I'd be curious if there is something in Fleet or the documentation we could improve for this.
j

Jon O'Brien

03/18/2019, 9:33 AM
we ran it as root user instead