https://github.com/osquery/osquery logo
Title
f

Florian

02/22/2023, 8:52 AM
Hi, i just rolled out osquery / orbit to 112 devices for testing purposes on fresh fleet instance. unfortunately the host explorer shows 144 devices lots of them showing as offline. as soon as i remove those they reappear. aside from online offline status they have no host information showing and i cannot click anything to get to their details page. i am quite sure these are not real devices. no idea why they are showing up though. did i mess this up?
o

Ojas

02/22/2023, 1:04 PM
happens with me but i get just 2 of them
l

Lucas Rodriguez

02/22/2023, 2:55 PM
Hi folks! We've heard the same from other users (1) using Linux distributions that do not have
/sys/class/dmi/id/product_uuid
(e.g. System76's Ubuntu) or (2) that have installed Orbit without root permissions. See #9132. Please let us know if this is the case for you.
o

Ojas

02/23/2023, 5:17 AM
Yep its same case with me: at times it shows 4,5 as well then i have to delete them all
l

Lucas Rodriguez

02/23/2023, 12:03 PM
Do you know which devices are having this issue? Like which Linux distributions
o

Ojas

02/23/2023, 12:24 PM
nope, they dont give back any details so no idea
they are increasing now
f

Florian

02/27/2023, 6:07 AM
checked for
/sys/class/dmi/id/product_uuid
across my test instances - 32 don't allow reading that file. all these hosts are Proxmox "unprivileged" LXC containers.
so this seems to confirm that all of these will show up twice - once as online and with data, once more as offline without any data