Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-24 09:28:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 30
fleet/server/kolide/osquery.go

73 lines
2.7 KiB
Go
Raw Normal View History

Domain Types (#83) * create datastore package with New func to create a db connection * separate creating a user object from saving to db temporarily pass db around through gin context to compile app main should create the datastore and pass it in to http handler explicitly instead * create datastore from config params * move gorm specific code to gorm.go * re-export app.NewUser * test new user * add User() method for getting a user temporary, the API will improve once I add filters refactor test func to use sqlite by default and mysql if available * add save user * move some users tests to datastore, temporarily remove user tests from app * add EnrollHost and test * move enrollhost to datastore * all enrollment tests now in datastore * add datastore_test for re-enroll * it compiles now... * move other interfaces to models * start wrapping errors in database error * add tests for campaign * move users to package kolide * move hosts and passwordrequests * package kolide * moving all types to package kolide * making new osquery endpoints use groob's new pattern
2016-08-18 21:16:44 +00:00
package kolide
Fix result log struct to support snapshot logs (#866) Snapshot logs have a different schema, and are now (un)serialized correctly. Fixes #841
2017-01-10 20:54:35 +00:00
import "golang.org/x/net/context"
Domain Types (#83) * create datastore package with New func to create a db connection * separate creating a user object from saving to db temporarily pass db around through gin context to compile app main should create the datastore and pass it in to http handler explicitly instead * create datastore from config params * move gorm specific code to gorm.go * re-export app.NewUser * test new user * add User() method for getting a user temporary, the API will improve once I add filters refactor test func to use sqlite by default and mysql if available * add save user * move some users tests to datastore, temporarily remove user tests from app * add EnrollHost and test * move enrollhost to datastore * all enrollment tests now in datastore * add datastore_test for re-enroll * it compiles now... * move other interfaces to models * start wrapping errors in database error * add tests for campaign * move users to package kolide * move hosts and passwordrequests * package kolide * moving all types to package kolide * making new osquery endpoints use groob's new pattern
2016-08-18 21:16:44 +00:00
queries and packs services via go-kit (#102) * osquery services via go-kit * Visual Studio Code configurations * create query and pack endpoints * organizing files more scalably * modify query and pack endpoints * delete query and pack endpoints * get query and pack endpoints * get all queries and packs endpoints * add and remove queries from packs * test stubs * removing some indirection * query service tests * service pack tests * transport tests * adding config file flag back * organizing package kolide * get queries in pack endpoint * run tests on 1.7? * no 1.7 image :( * typo in circle.yml
2016-09-04 05:13:42 +00:00
type OsqueryService interface {
add missing logs to kolide service (#843) Add logging middleware for more of the kolide Service interfaces. This PR was created through code generation, however it's not likely that the logging middleware can all be continuously regenerated - we're likely to want to add method specific key/values to individual methods. Moving forward, logging middleware should be maintained when changes are made to a service interface method.
2017-01-10 04:40:21 +00:00
EnrollAgent(ctx context.Context, enrollSecret, hostIdentifier string) (nodeKey string, err error)
AuthenticateHost(ctx context.Context, nodeKey string) (host *Host, err error)
GetClientConfig(ctx context.Context) (config *OsqueryConfig, err error)
GetDistributedQueries(ctx context.Context) (queries map[string]string, err error)
Push distributed query errors over results websocket (#878) As of recently, osquery will report when a distributed query fails. We now expose errors over the results websocket. When a query errored on the host, the `error` key in the result will be non-null. Note that osquery currently doesn't provide any details so the error string will always be "failed". I anticipate that we will fix this and the string is included for future-proofing. Successful result: ``` { "type": "result", "data": { "distributed_query_execution_id": 15, "host": { ... omitted ... }, "rows": [ { "hour": "1" } ], "error": null } } ``` Failed result: ``` { "type": "result", "data": { "distributed_query_execution_id": 14, "host": { ... omitted ... }, "rows": [ ], "error": "failed" } } ```
2017-01-11 03:34:32 +00:00
SubmitDistributedQueryResults(ctx context.Context, results OsqueryDistributedQueryResults, statuses map[string]string) (err error)
add missing logs to kolide service (#843) Add logging middleware for more of the kolide Service interfaces. This PR was created through code generation, however it's not likely that the logging middleware can all be continuously regenerated - we're likely to want to add method specific key/values to individual methods. Moving forward, logging middleware should be maintained when changes are made to a service interface method.
2017-01-10 04:40:21 +00:00
SubmitStatusLogs(ctx context.Context, logs []OsqueryStatusLog) (err error)
SubmitResultLogs(ctx context.Context, logs []OsqueryResultLog) (err error)
Add GetLabelQueriesForHost (#86) * Add/update models for label queries * Write functions to determine which label queries should run for a given host * Tests
2016-08-19 18:24:59 +00:00
}
Osqueryd Service (#119) * host service stuff * working on the osquery service api * log status and results logs
2016-09-06 21:28:07 +00:00
type OsqueryDistributedQueryResults map[string][]map[string]string
Query management backend (#95) * initial data model modifications * stubbing out http api endpoints * becoming more restful * GetAllQueries * GetAllPacks * GetQuery * GetPack * fixing datastore tests * CreateQuery * CreatePack * ModifyQuery * ModifyPack * DeleteQuery * DeletePack * AddQueryToPack * DeleteQueryFromPack * todo change route URI * fixing go vet * comments * universal url id parsing api
2016-08-24 02:30:55 +00:00
Serializable config types (#141)
2016-09-19 23:11:39 +00:00
type QueryContent struct {
Moving query attributes from the query object to the pack-query relationship (#559) * Moving query attributes from the query object to the pack-query relationship * some additional tests * http request parsing test * QueryOptions in new test_util code * initial scaffolding of new request structures * service and datastore * test outline * l2 merge conflict scrub * service tests for scheduled query service * service and datastore tests * most endpoints and transports * order of values are not deterministic with inmem * transport tests * rename PackQuery to ScheduledQuery * removing existing implementation of adding queries to packs * accounting for the new argument to NewQuery * fix alignment in sql query * removing underscore * add removed to the datastore * removed differential from the schema
2016-12-13 22:22:05 +00:00
Query string `json:"query"`
Description string `json:"description,omitempty"`
Interval uint `json:"interval"`
Platform *string `json:"platform,omitempty"`
Version *string `json:"version,omitempty"`
Snapshot *bool `json:"snapshot,omitempty"`
Removed *bool `json:"removed,omitempty"`
Shard *uint `json:"shard,omitempty"`
Serializable config types (#141)
2016-09-19 23:11:39 +00:00
}
type Queries map[string]QueryContent
type PackContent struct {
Platform string `json:"platform,omitempty"`
Version string `json:"version,omitempty"`
Shard uint `json:"shard,omitempty"`
Discovery []string `json:"discovery,omitempty"`
Queries Queries `json:"queries"`
}
type Packs map[string]PackContent
type Decorators struct {
Load []string `json:"load,omitempty"`
Always []string `json:"always,omitempty"`
Interval map[string][]string `json:"interval,omitempty"`
}
queries and packs services via go-kit (#102) * osquery services via go-kit * Visual Studio Code configurations * create query and pack endpoints * organizing files more scalably * modify query and pack endpoints * delete query and pack endpoints * get query and pack endpoints * get all queries and packs endpoints * add and remove queries from packs * test stubs * removing some indirection * query service tests * service pack tests * transport tests * adding config file flag back * organizing package kolide * get queries in pack endpoint * run tests on 1.7? * no 1.7 image :( * typo in circle.yml
2016-09-04 05:13:42 +00:00
type OsqueryConfig struct {
Osquery Options - /config/osquery-options #365 (#729)
2016-12-31 17:56:54 +00:00
Options map[string]interface{} `json:"options"`
Decorators Decorators `json:"decorators,omitempty"`
Packs Packs `json:"packs,omitempty"`
Domain Types (#83) * create datastore package with New func to create a db connection * separate creating a user object from saving to db temporarily pass db around through gin context to compile app main should create the datastore and pass it in to http handler explicitly instead * create datastore from config params * move gorm specific code to gorm.go * re-export app.NewUser * test new user * add User() method for getting a user temporary, the API will improve once I add filters refactor test func to use sqlite by default and mysql if available * add save user * move some users tests to datastore, temporarily remove user tests from app * add EnrollHost and test * move enrollhost to datastore * all enrollment tests now in datastore * add datastore_test for re-enroll * it compiles now... * move other interfaces to models * start wrapping errors in database error * add tests for campaign * move users to package kolide * move hosts and passwordrequests * package kolide * moving all types to package kolide * making new osquery endpoints use groob's new pattern
2016-08-18 21:16:44 +00:00
}
Add GetLabelQueriesForHost (#86) * Add/update models for label queries * Write functions to determine which label queries should run for a given host * Tests
2016-08-19 18:24:59 +00:00
Osqueryd Service (#119) * host service stuff * working on the osquery service api * log status and results logs
2016-09-06 21:28:07 +00:00
type OsqueryResultLog struct {
Fix result log struct to support snapshot logs (#866) Snapshot logs have a different schema, and are now (un)serialized correctly. Fixes #841
2017-01-10 20:54:35 +00:00
Name string `json:"name"`
HostIdentifier string `json:"hostIdentifier"`
UnixTime string `json:"unixTime"`
CalendarTime string `json:"calendarTime"`
// Columns stores the columns of differential queries
Columns map[string]string `json:"columns,omitempty"`
// Snapshot stores the rows and columns of snapshot queries
Snapshot []map[string]string `json:"snapshot,omitempty"`
Action string `json:"action"`
Decorations map[string]string `json:"decorations"`
Osqueryd Service (#119) * host service stuff * working on the osquery service api * log status and results logs
2016-09-06 21:28:07 +00:00
}
type OsqueryStatusLog struct {
Severity string `json:"severity"`
Filename string `json:"filename"`
Line string `json:"line"`
Message string `json:"message"`
Version string `json:"version"`
Decorations map[string]string `json:"decorations"`
}
Reference in a new issue Copy permalink