Hey everyone. Im having issues with OSquery pulli...
# windowsc
cstevens
08/05/2020, 6:26 PMHey everyone. Im having issues with OSquery pulling my ec2_instance_metadata on a Windows instance.
Copy code
PS C:\Program Files\osquery> .\osqueryi.exe "SELECT availability_zone AS az, instance_id FROM ec2_instance_metadata;"
.\osqueryi.exe : Error: no such table: ec2_instance_metadata
At line:1 char:1
+ .\osqueryi.exe "SELECT availability_zone AS az, instance_id FROM ec2_ ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (Error: no such ...stance_metadata:String) [], RemoteException
+ FullyQualifiedErrorId : NativeCommandErrorcstevens
08/05/2020, 6:41 PMI see now that there is no table defined for windows named "ec2_instance_metadata". Is OSquery setup to find such data for a windows instance then?
s
seph
08/16/2020, 1:14 AM
You might be able to use curl. Not sure.
seph
08/16/2020, 1:14 AM
I think we should fix the
ec2_instance_metadata