Ricardo Carvalho
02/24/2023, 10:26 AMKathy Satterlee
02/24/2023, 3:38 PMRicardo Carvalho
02/24/2023, 4:25 PMKathy Satterlee
02/24/2023, 4:39 PMRicardo Carvalho
02/24/2023, 4:51 PMlevel=error ts=2023-02-24T16:47:15.496985412Z component=http method=POST uri=/api/v1/osquery/distributed/write took=1m8.170772473s ip_addr=10.244.3.0 x_for_ip_addr=10.244.3.0 ingestion-err="campaign stopped" ingestion-err="ingesting query software_linux: update host software: get software: context canceled" ingestion-err="ingesting query disk_encryption_linux: update: context canceled" ingestion-err="ingesting query users: update host users: create transaction: context canceled" err="error in query ingestion || error in query ingestion || error in query ingestion || error in query ingestion || create transaction: context canceled || save host with id 616: context canceled"
Kathy Satterlee
02/24/2023, 5:19 PMRicardo Carvalho
02/24/2023, 5:31 PMKathy Satterlee
02/24/2023, 5:33 PMRicardo Carvalho
02/24/2023, 7:06 PMKathy Satterlee
02/24/2023, 7:24 PMRicardo Carvalho
03/06/2023, 12:40 PMlevel=error ts=2023-03-06T12:32:59.525524968Z query=fleet_detail_query_disk_encryption_linux message="distributed query is denylisted" hostID=879
level=error ts=2023-03-06T12:32:59.525643868Z query=fleet_detail_query_network_interface_unix message="distributed query is denylisted" hostID=879
level=error ts=2023-03-06T12:33:00.218312788Z query=fleet_detail_query_network_interface_unix message="distributed query is denylisted" hostID=879
level=error ts=2023-03-06T12:33:00.218542088Z query=fleet_detail_query_disk_encryption_linux message="distributed query is denylisted" hostID=879
level=error ts=2023-03-06T12:34:07.300702754Z component=http method=POST uri=/api/v1/osquery/distributed/write took=1m7.840825507s ip_addr=10.244.3.1 x_for_ip_addr=10.244.3.1 ingestion-err="ingesting query software_linux: update host software: insert software: context canceled" ingestion-err="ingesting query users: update host users: create transaction: context canceled" err="error in query ingestion || error in query ingestion || create transaction: context canceled || save host with id 879: context canceled"
level=error ts=2023-03-06T14:04:58.34074582Z component=http method=POST uri=/api/v1/osquery/distributed/write took=24.193492712s ip_addr=10.244.3.0 x_for_ip_addr=10.244.3.0 ingestion-err="ingesting query software_linux: update host software: insert software: Error 1213: Deadlock found when trying to get lock; try restarting transaction" err="error in query ingestion"