I use fleet, mariadb, redis and osquery in macOS. And recently i have one problem. I make query in UI fleet on host, but i don't get result. I think that agent on host doesn't get query. I checked, when i make query in UI Fleet, query appears in mariadb, and i view new key in redis.
May be you know that i need check and how make it.
Thread in #general
01/09/2023, 4:25 PM
Hey @Marina! Id really recommend upgrading Fleet. The current version is 4.25.0 and version 3 is no longer supported. Please note that MariaDB is also not supported, so this would be a good opportunity to switch to MySQL as well.
01/10/2023, 8:37 PM
Hello, @Kathy Satterlee!
I will try to upgrade everything and use mysql. But right now I can't do it. Can I check something in the settings to see why the live query is not working?
ps: i also found information in documentation, and tried make query in brouser: https://my_fleet_server:8081/healtz. I got answer 200 ok.
I have checked: when i make query in UI Fleet, query appears in mariadb, also redis has new key in db. I think the agent is the problem. Agent doesn't get query. But if i make query from shedule, i have results. I don't understand what is wrong
01/11/2023, 6:37 PM
Is this happening on all hosts, or a specific host?
01/11/2023, 8:08 PM
@Kathy Satterlee Yes, it is on all hosts. And early all was ok.
01/11/2023, 8:18 PM
Can you check the osquery logs for any errors?
01/16/2023, 6:12 PM
Hello, @Kathy Satterlee !
I attached some screens with errors at last posts. Have you any ideas, what is the problems? I tried find description in google and fleet documentation, but i don't get results...