brian
01/31/2023, 9:10 PMKathy Satterlee
01/31/2023, 9:45 PMbrian
01/31/2023, 9:45 PMKathy Satterlee
01/31/2023, 9:48 PMbrian
01/31/2023, 9:50 PMKathy Satterlee
01/31/2023, 9:51 PMbrian
01/31/2023, 9:56 PMKathy Satterlee
01/31/2023, 10:05 PMSELECT * FROM hosts WHERE orbit_node_key = NULL;
brian
01/31/2023, 10:07 PMKathy Satterlee
01/31/2023, 10:10 PMbrian
01/31/2023, 10:17 PM| 56 | 51b2b9d6-e102-49c3-9fd7-2f8cac64fb3d | 2023-01-30 19:33:49 | JJFxbCFU93oRY94xyzhz2l11WkIZ1tUI | localhost | 51b2b9d6-e102-49c3-9fd7-2f8cac64fb3d | 2023-01-30 19:33:49 | NULL |
| 94 | 6c76c81a-cb0d-4288-8201-06bc558dda5a | 2023-02-01 16:00:56 | IYKQaZsExKnuFXNv0rdBSUgEKyfktEi6 | | | 1970-01-02 00:00:00 | IYKQaZsExKnuFXNv0rdBSUgEKyfktEi6 |
| hostname | uuid | last_enrolled_at | orbit_node_key |
+--------------------------+--------------------------------------+---------------------+----------------------------------+
| localhost | 51b2b9d6-e102-49c3-9fd7-2f8cac64fb3d | 2023-01-30 19:33:49 | NULL |
| | | 1970-01-02 00:00:00 | IYKQaZsExKnuFXNv0rdBSUgEKyfktEi6 |
orbit_node_key
and another host with orbit_node_key
equal to node_key
.Kathy Satterlee
02/02/2023, 8:41 PM--debug
flag for more verbose logging.brian
02/02/2023, 9:15 PMFeb 2 16:04:41 localhost orbit[58456]: 2023-02-02T16:04:41-05:00 DBG no update target=orbit
Feb 2 16:04:41 localhost orbit[58456]: 2023-02-02T16:04:41-05:00 DBG no update target=osqueryd
Feb 2 16:04:42 localhost orbit[58456]: 2023-02-02T16:04:42-05:00 DBG found expected target locally path=/opt/orbit/bin/osqueryd/linux/stable/osqueryd target=osqueryd
Feb 2 16:04:42 localhost orbit[58456]: 2023-02-02T16:04:42-05:00 DBG running single query (SELECT uuid FROM system_info)
Feb 2 16:04:42 localhost orbit[58456]: 2023-02-02T16:04:42-05:00 DBG UUID is 6e2c24c6-f205-4b39-8bf3-28fc825c2156
Feb 2 16:04:42 localhost orbit[58456]: 2023-02-02T16:04:42-05:00 INF initial flags update failed error="error getting flags from fleet: unauthenticated, or invalid token"
Feb 2 16:04:42 localhost orbit[58456]: 2023-02-02T16:04:42-05:00 DBG /opt/orbit/extensions.load not found, nothing to update
Feb 2 16:04:43 localhost orbit[58456]: 2023-02-02T16:04:43-05:00 DBG no update target=orbit
Feb 2 16:04:43 localhost orbit[58456]: 2023-02-02T16:04:43-05:00 DBG no update target=osqueryd
Feb 2 16:04:43 localhost orbit[58456]: 2023-02-02T16:04:43-05:00 INF token rotation is enabled
Feb 2 16:04:43 localhost orbit[58456]: 2023-02-02T16:04:43-05:00 DBG starting flag updater
Feb 2 16:04:43 localhost orbit[58456]: 2023-02-02T16:04:43-05:00 DBG starting extension runner
Feb 2 16:04:43 localhost orbit[58456]: 2023-02-02T16:04:43-05:00 DBG start updater
Feb 2 16:04:43 localhost orbit[58456]: 2023-02-02T16:04:43-05:00 DBG start osquery extension
6e2c24c6-f205-4b39-8bf3-28fc825c2156
corresponds with the empty host’s osquery_host_id
value that ends up in the db.Feb 2 17:25:23 localhost orbit[74253]: 2023-02-02T17:25:23-05:00 DBG running single query (SELECT uuid FROM system_info)
Feb 2 17:25:23 localhost orbit[74253]: 2023-02-02T17:25:23-05:00 DBG UUID is 818ec869-0fc6-4522-8aa7-216e0f16f2b5
If the unknown host is already registered in our Fleet instance, then nothing happens. If it’s not registered, then it gets registered.Ryan W.
02/03/2023, 7:46 PMKathy Satterlee
02/03/2023, 7:56 PMbrian
02/03/2023, 8:03 PMbriandefiant
.Ryan W.
02/03/2023, 8:34 PMLucas Rodriguez
02/06/2023, 12:12 PM