mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 13:37:30 +00:00
01dd0c7c4d
#17375 Updating the osquery flags for 5.12.2 And making the changes so that we can just run `cd server/fleet/ && go generate` on a macOS host every time we need to do this. Manual tested by setting `logger_tls_backoff_max` in Fleet agent settings (which is a 5.12.0 flag). - [X] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - [x] Added/updated tests - [x] Manual QA for all new/changed functionality --------- Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
285 lines
5.4 KiB
Text
285 lines
5.4 KiB
Text
alarm_timeout
|
|
allow_unsafe
|
|
alsologtostderr
|
|
audit_allow_accept_socket_events
|
|
audit_allow_apparmor_events
|
|
audit_allow_config
|
|
audit_allow_failed_socket_events
|
|
audit_allow_fim_events
|
|
audit_allow_fork_process_events
|
|
audit_allow_kill_process_events
|
|
audit_allow_null_accept_socket_events
|
|
audit_allow_process_events
|
|
audit_allow_seccomp_events
|
|
audit_allow_selinux_events
|
|
audit_allow_sockets
|
|
audit_allow_unix
|
|
audit_allow_user_events
|
|
audit_backlog_limit
|
|
audit_backlog_wait_time
|
|
audit_debug
|
|
audit_fim_debug
|
|
audit_fim_show_accesses
|
|
audit_force_reconfigure
|
|
audit_force_unconfigure
|
|
audit_persist
|
|
audit_show_partial_fim_events
|
|
audit_show_untracked_res_warnings
|
|
augeas_lenses
|
|
aws_access_key_id
|
|
aws_debug
|
|
aws_disable_imdsv1_fallback
|
|
aws_enable_proxy
|
|
aws_enforce_fips
|
|
aws_firehose_endpoint
|
|
aws_firehose_period
|
|
aws_firehose_region
|
|
aws_firehose_stream
|
|
aws_imdsv2_request_attempts
|
|
aws_imdsv2_request_interval
|
|
aws_kinesis_disable_log_status
|
|
aws_kinesis_endpoint
|
|
aws_kinesis_period
|
|
aws_kinesis_random_partition_key
|
|
aws_kinesis_region
|
|
aws_kinesis_stream
|
|
aws_profile_name
|
|
aws_proxy_host
|
|
aws_proxy_password
|
|
aws_proxy_port
|
|
aws_proxy_scheme
|
|
aws_proxy_username
|
|
aws_region
|
|
aws_secret_access_key
|
|
aws_session_token
|
|
aws_sts_arn_role
|
|
aws_sts_region
|
|
aws_sts_session_name
|
|
aws_sts_timeout
|
|
bpf_buffer_storage_size
|
|
bpf_perf_event_array_exp
|
|
bpf_state_tracker_reset_time
|
|
buffered_log_max
|
|
carver_block_size
|
|
carver_compression
|
|
carver_continue_endpoint
|
|
carver_disable_function
|
|
carver_expiry
|
|
carver_start_endpoint
|
|
config_accelerated_refresh
|
|
config_check
|
|
config_dump
|
|
config_enable_backup
|
|
config_path
|
|
config_plugin
|
|
config_refresh
|
|
config_tls_endpoint
|
|
config_tls_max_attempts
|
|
connect
|
|
csv
|
|
daemonize
|
|
database_dump
|
|
database_path
|
|
decorations_top_level
|
|
disable_audit
|
|
disable_caching
|
|
disable_carver
|
|
disable_database
|
|
disable_decorators
|
|
disable_distributed
|
|
disable_endpointsecurity
|
|
disable_endpointsecurity_fim
|
|
disable_enrollment
|
|
disable_events
|
|
disable_extensions
|
|
disable_hash_cache
|
|
disable_logging
|
|
disable_memory
|
|
disable_reenrollment
|
|
disable_tables
|
|
disable_watchdog
|
|
distributed_denylist_duration
|
|
distributed_interval
|
|
distributed_loginfo
|
|
distributed_plugin
|
|
distributed_tls_max_attempts
|
|
distributed_tls_read_endpoint
|
|
distributed_tls_write_endpoint
|
|
docker_socket
|
|
enable_bpf_events
|
|
enable_extensions_watchdog
|
|
enable_file_events
|
|
enable_foreign
|
|
enable_keyboard_events
|
|
enable_mouse_events
|
|
enable_ntfs_event_publisher
|
|
enable_numeric_monitoring
|
|
enable_powershell_events_subscriber
|
|
enable_process_etw_events
|
|
enable_syslog
|
|
enable_watchdog_debug
|
|
enable_windows_events_publisher
|
|
enable_windows_events_subscriber
|
|
enable_yara_string
|
|
enroll_always
|
|
enroll_secret_env
|
|
enroll_secret_path
|
|
enroll_tls_endpoint
|
|
ephemeral
|
|
es_fim_enable_open_events
|
|
es_fim_mute_path_literal
|
|
es_fim_mute_path_prefix
|
|
etw_kernel_trace_buffer_size
|
|
etw_kernel_trace_flush_timer
|
|
etw_kernel_trace_maximum_buffers
|
|
etw_kernel_trace_minimum_buffers
|
|
etw_userspace_trace_buffer_size
|
|
etw_userspace_trace_flush_timer
|
|
etw_userspace_trace_maximum_buffers
|
|
etw_userspace_trace_minimum_buffers
|
|
events_enforce_denylist
|
|
events_expiry
|
|
events_max
|
|
events_optimize
|
|
events_streaming_plugin
|
|
experiment_list
|
|
experiments_linuxevents_circular_buffer_size
|
|
experiments_linuxevents_perf_output_size
|
|
extension
|
|
extension_only
|
|
extensions_autoload
|
|
extensions_default_index
|
|
extensions_interval
|
|
extensions_require
|
|
extensions_socket
|
|
extensions_timeout
|
|
flag
|
|
flagfile
|
|
force
|
|
groups_service_delay
|
|
groups_service_interval
|
|
hardware_disabled_types
|
|
hash_cache_max
|
|
hash_delay
|
|
header
|
|
host_identifier
|
|
ignore_registry_exceptions
|
|
ignore_table_exceptions
|
|
install
|
|
json
|
|
json_pretty
|
|
keep_container_worker_open
|
|
keychain_access_cache
|
|
keychain_access_interval
|
|
line
|
|
list
|
|
log_dir
|
|
logbufsecs
|
|
logger_event_type
|
|
logger_kafka_acks
|
|
logger_kafka_brokers
|
|
logger_kafka_compression
|
|
logger_kafka_topic
|
|
logger_min_status
|
|
logger_min_stderr
|
|
logger_mode
|
|
logger_numerics
|
|
logger_path
|
|
logger_plugin
|
|
logger_rotate
|
|
logger_rotate_max_files
|
|
logger_rotate_size
|
|
logger_snapshot_event_type
|
|
logger_status_sync
|
|
logger_stderr
|
|
logger_syslog_facility
|
|
logger_syslog_prepend_cee
|
|
logger_tls_compress
|
|
logger_tls_endpoint
|
|
logger_tls_max_lines
|
|
logger_tls_max_linesize
|
|
logger_tls_period
|
|
logtostderr
|
|
lxd_socket
|
|
max_log_size
|
|
minloglevel
|
|
ntfs_event_publisher_debug
|
|
nullvalue
|
|
numeric_monitoring_filesystem_path
|
|
numeric_monitoring_plugins
|
|
numeric_monitoring_pre_aggregation_time
|
|
pack
|
|
pack_delimiter
|
|
pack_refresh_interval
|
|
pidfile
|
|
planner
|
|
profile
|
|
profile_delay
|
|
proxy_hostname
|
|
read_max
|
|
regex_max_size
|
|
rocksdb_background_flushes
|
|
rocksdb_buffer_blocks
|
|
rocksdb_merge_number
|
|
rocksdb_write_buffer
|
|
schedule_default_interval
|
|
schedule_epoch
|
|
schedule_lognames
|
|
schedule_max_drift
|
|
schedule_reload
|
|
schedule_reload_sql
|
|
schedule_splay_percent
|
|
schedule_timeout
|
|
separator
|
|
shell_only
|
|
shell_only_alias
|
|
specified_identifier
|
|
stderrthreshold
|
|
stop_logging_if_full_disk
|
|
syslog_events_expiry
|
|
syslog_events_max
|
|
syslog_pipe_path
|
|
syslog_rate_limit
|
|
table_delay
|
|
test_double
|
|
test_double_alias
|
|
test_int32
|
|
test_int32_alias
|
|
test_int64
|
|
test_int64_alias
|
|
test_options_race_parser
|
|
test_string
|
|
test_string_alias
|
|
test_string_flag
|
|
thrift_string_size_limit
|
|
thrift_timeout
|
|
thrift_verbose
|
|
tls_allow_unsafe
|
|
tls_client_cert
|
|
tls_client_key
|
|
tls_disable_status_log
|
|
tls_dump
|
|
tls_enroll_max_attempts
|
|
tls_enroll_max_interval
|
|
tls_enroll_override
|
|
tls_hostname
|
|
tls_node_api
|
|
tls_secret_always
|
|
tls_server_certs
|
|
tls_session_reuse
|
|
tls_session_timeout
|
|
uninstall
|
|
users_service_delay
|
|
users_service_interval
|
|
usn_journal_reader_debug
|
|
v
|
|
verbose
|
|
watchdog_delay
|
|
watchdog_forced_shutdown_delay
|
|
watchdog_latency_limit
|
|
watchdog_level
|
|
watchdog_max_delay
|
|
watchdog_memory_limit
|
|
watchdog_utilization_limit
|
|
windows_event_channels
|
|
yara_delay
|