mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 00:49:03 +00:00
308 lines
16 KiB
Go
308 lines
16 KiB
Go
// Automatically generated by tools/osquery-agent-options for osquery 5.18.1. DO NOT EDIT!
|
|
// To update flags for a new osquery version, update the osqueryVersion variable in
|
|
// "tools/osquery-agent-options/main.go" and run "cd server/fleet/ && go generate".
|
|
package fleet
|
|
|
|
type osqueryOptions struct {
|
|
AuditAllowConfig bool `json:"audit_allow_config"`
|
|
AuditAllowFimEvents bool `json:"audit_allow_fim_events"`
|
|
AuditAllowProcessEvents bool `json:"audit_allow_process_events"`
|
|
AuditAllowSockets bool `json:"audit_allow_sockets"`
|
|
AuditAllowUserEvents bool `json:"audit_allow_user_events"`
|
|
AugeasLenses string `json:"augeas_lenses"`
|
|
AwsAccessKeyId string `json:"aws_access_key_id"`
|
|
AwsDebug bool `json:"aws_debug"`
|
|
AwsDisableImdsv1Fallback bool `json:"aws_disable_imdsv1_fallback"`
|
|
AwsEnableProxy bool `json:"aws_enable_proxy"`
|
|
AwsFirehoseEndpoint string `json:"aws_firehose_endpoint"`
|
|
AwsFirehosePeriod uint64 `json:"aws_firehose_period"`
|
|
AwsFirehoseRegion string `json:"aws_firehose_region"`
|
|
AwsFirehoseStream string `json:"aws_firehose_stream"`
|
|
AwsImdsv2RequestAttempts uint32 `json:"aws_imdsv2_request_attempts"`
|
|
AwsImdsv2RequestInterval uint32 `json:"aws_imdsv2_request_interval"`
|
|
AwsKinesisDisableLogStatus bool `json:"aws_kinesis_disable_log_status"`
|
|
AwsKinesisEndpoint string `json:"aws_kinesis_endpoint"`
|
|
AwsKinesisPeriod uint64 `json:"aws_kinesis_period"`
|
|
AwsKinesisRandomPartitionKey bool `json:"aws_kinesis_random_partition_key"`
|
|
AwsKinesisRegion string `json:"aws_kinesis_region"`
|
|
AwsKinesisStream string `json:"aws_kinesis_stream"`
|
|
AwsProfileName string `json:"aws_profile_name"`
|
|
AwsProxyHost string `json:"aws_proxy_host"`
|
|
AwsProxyPassword string `json:"aws_proxy_password"`
|
|
AwsProxyPort uint32 `json:"aws_proxy_port"`
|
|
AwsProxyScheme string `json:"aws_proxy_scheme"`
|
|
AwsProxyUsername string `json:"aws_proxy_username"`
|
|
AwsRegion string `json:"aws_region"`
|
|
AwsSecretAccessKey string `json:"aws_secret_access_key"`
|
|
AwsSessionToken string `json:"aws_session_token"`
|
|
AwsStsArnRole string `json:"aws_sts_arn_role"`
|
|
AwsStsRegion string `json:"aws_sts_region"`
|
|
AwsStsSessionName string `json:"aws_sts_session_name"`
|
|
AwsStsTimeout uint64 `json:"aws_sts_timeout"`
|
|
BufferedLogMax uint64 `json:"buffered_log_max"`
|
|
DecorationsTopLevel bool `json:"decorations_top_level"`
|
|
DisableAudit bool `json:"disable_audit"`
|
|
DisableCaching bool `json:"disable_caching"`
|
|
DisableDatabase bool `json:"disable_database"`
|
|
DisableDecorators bool `json:"disable_decorators"`
|
|
DisableDistributed bool `json:"disable_distributed"`
|
|
DisableEvents bool `json:"disable_events"`
|
|
DisableHashCache bool `json:"disable_hash_cache"`
|
|
DisableLogging bool `json:"disable_logging"`
|
|
DistributedDenylistDuration uint64 `json:"distributed_denylist_duration"`
|
|
DistributedInterval uint64 `json:"distributed_interval"`
|
|
DistributedLoginfo bool `json:"distributed_loginfo"`
|
|
DistributedPlugin string `json:"distributed_plugin"`
|
|
DistributedTlsMaxAttempts uint64 `json:"distributed_tls_max_attempts"`
|
|
DistributedTlsReadEndpoint string `json:"distributed_tls_read_endpoint"`
|
|
DistributedTlsWriteEndpoint string `json:"distributed_tls_write_endpoint"`
|
|
DockerSocket string `json:"docker_socket"`
|
|
EnableFileEvents bool `json:"enable_file_events"`
|
|
EnableForeign bool `json:"enable_foreign"`
|
|
EnableNumericMonitoring bool `json:"enable_numeric_monitoring"`
|
|
Ephemeral bool `json:"ephemeral"`
|
|
EsFimEnableOpenEvents bool `json:"es_fim_enable_open_events"`
|
|
EventsExpiry uint64 `json:"events_expiry"`
|
|
EventsMax uint64 `json:"events_max"`
|
|
EventsOptimize bool `json:"events_optimize"`
|
|
ExperimentList string `json:"experiment_list"`
|
|
ExtensionsDefaultIndex bool `json:"extensions_default_index"`
|
|
HashCacheMax uint32 `json:"hash_cache_max"`
|
|
HostIdentifier string `json:"host_identifier"`
|
|
IgnoreTableExceptions bool `json:"ignore_table_exceptions"`
|
|
KeychainAccessCache bool `json:"keychain_access_cache"`
|
|
KeychainAccessInterval uint32 `json:"keychain_access_interval"`
|
|
LoggerEventType bool `json:"logger_event_type"`
|
|
LoggerKafkaAcks string `json:"logger_kafka_acks"`
|
|
LoggerKafkaBrokers string `json:"logger_kafka_brokers"`
|
|
LoggerKafkaCompression string `json:"logger_kafka_compression"`
|
|
LoggerKafkaTopic string `json:"logger_kafka_topic"`
|
|
LoggerMinStatus int32 `json:"logger_min_status"`
|
|
LoggerMinStderr int32 `json:"logger_min_stderr"`
|
|
LoggerNumerics bool `json:"logger_numerics"`
|
|
LoggerPath string `json:"logger_path"`
|
|
LoggerRotate bool `json:"logger_rotate"`
|
|
LoggerRotateMaxFiles uint64 `json:"logger_rotate_max_files"`
|
|
LoggerRotateSize uint64 `json:"logger_rotate_size"`
|
|
LoggerSnapshotEventType bool `json:"logger_snapshot_event_type"`
|
|
LoggerSyslogFacility int32 `json:"logger_syslog_facility"`
|
|
LoggerSyslogPrependCee bool `json:"logger_syslog_prepend_cee"`
|
|
LoggerTlsBackoffMax uint64 `json:"logger_tls_backoff_max"`
|
|
LoggerTlsCompress bool `json:"logger_tls_compress"`
|
|
LoggerTlsEndpoint string `json:"logger_tls_endpoint"`
|
|
LoggerTlsMaxLines uint64 `json:"logger_tls_max_lines"`
|
|
LoggerTlsMaxLinesize uint64 `json:"logger_tls_max_linesize"`
|
|
LoggerTlsPeriod uint64 `json:"logger_tls_period"`
|
|
Nullvalue string `json:"nullvalue"`
|
|
NumericMonitoringFilesystemPath string `json:"numeric_monitoring_filesystem_path"`
|
|
NumericMonitoringPlugins string `json:"numeric_monitoring_plugins"`
|
|
NumericMonitoringPreAggregationTime uint64 `json:"numeric_monitoring_pre_aggregation_time"`
|
|
PackDelimiter string `json:"pack_delimiter"`
|
|
PackRefreshInterval uint64 `json:"pack_refresh_interval"`
|
|
ReadMax uint64 `json:"read_max"`
|
|
ScheduleDefaultInterval uint64 `json:"schedule_default_interval"`
|
|
ScheduleEpoch uint64 `json:"schedule_epoch"`
|
|
ScheduleLognames bool `json:"schedule_lognames"`
|
|
ScheduleMaxDrift uint64 `json:"schedule_max_drift"`
|
|
ScheduleReload uint64 `json:"schedule_reload"`
|
|
ScheduleSplayPercent uint64 `json:"schedule_splay_percent"`
|
|
ScheduleTimeout uint64 `json:"schedule_timeout"`
|
|
SpecifiedIdentifier string `json:"specified_identifier"`
|
|
TableDelay uint64 `json:"table_delay"`
|
|
ThriftStringSizeLimit int32 `json:"thrift_string_size_limit"`
|
|
ThriftTimeout uint32 `json:"thrift_timeout"`
|
|
ThriftVerbose bool `json:"thrift_verbose"`
|
|
TlsDisableStatusLog bool `json:"tls_disable_status_log"`
|
|
Verbose bool `json:"verbose"`
|
|
YaraDelay uint32 `json:"yara_delay"`
|
|
YaraSigurlAuthenticate bool `json:"yara_sigurl_authenticate"`
|
|
|
|
// embed the os-specific structs
|
|
OsqueryCommandLineFlagsLinux
|
|
OsqueryCommandLineFlagsWindows
|
|
OsqueryCommandLineFlagsMacOS
|
|
OsqueryCommandLineFlagsHidden
|
|
}
|
|
|
|
type osqueryCommandLineFlags struct {
|
|
AlarmTimeout uint64 `json:"alarm_timeout"`
|
|
AuditAllowConfig bool `json:"audit_allow_config"`
|
|
AuditAllowFimEvents bool `json:"audit_allow_fim_events"`
|
|
AuditAllowProcessEvents bool `json:"audit_allow_process_events"`
|
|
AuditAllowSockets bool `json:"audit_allow_sockets"`
|
|
AuditAllowUserEvents bool `json:"audit_allow_user_events"`
|
|
AugeasLenses string `json:"augeas_lenses"`
|
|
AwsAccessKeyId string `json:"aws_access_key_id"`
|
|
AwsDebug bool `json:"aws_debug"`
|
|
AwsDisableImdsv1Fallback bool `json:"aws_disable_imdsv1_fallback"`
|
|
AwsEnableProxy bool `json:"aws_enable_proxy"`
|
|
AwsEnforceFips bool `json:"aws_enforce_fips"`
|
|
AwsFirehoseEndpoint string `json:"aws_firehose_endpoint"`
|
|
AwsFirehosePeriod uint64 `json:"aws_firehose_period"`
|
|
AwsFirehoseRegion string `json:"aws_firehose_region"`
|
|
AwsFirehoseStream string `json:"aws_firehose_stream"`
|
|
AwsImdsv2RequestAttempts uint32 `json:"aws_imdsv2_request_attempts"`
|
|
AwsImdsv2RequestInterval uint32 `json:"aws_imdsv2_request_interval"`
|
|
AwsKinesisDisableLogStatus bool `json:"aws_kinesis_disable_log_status"`
|
|
AwsKinesisEndpoint string `json:"aws_kinesis_endpoint"`
|
|
AwsKinesisPeriod uint64 `json:"aws_kinesis_period"`
|
|
AwsKinesisRandomPartitionKey bool `json:"aws_kinesis_random_partition_key"`
|
|
AwsKinesisRegion string `json:"aws_kinesis_region"`
|
|
AwsKinesisStream string `json:"aws_kinesis_stream"`
|
|
AwsProfileName string `json:"aws_profile_name"`
|
|
AwsProxyHost string `json:"aws_proxy_host"`
|
|
AwsProxyPassword string `json:"aws_proxy_password"`
|
|
AwsProxyPort uint32 `json:"aws_proxy_port"`
|
|
AwsProxyScheme string `json:"aws_proxy_scheme"`
|
|
AwsProxyUsername string `json:"aws_proxy_username"`
|
|
AwsRegion string `json:"aws_region"`
|
|
AwsSecretAccessKey string `json:"aws_secret_access_key"`
|
|
AwsSessionToken string `json:"aws_session_token"`
|
|
AwsStsArnRole string `json:"aws_sts_arn_role"`
|
|
AwsStsRegion string `json:"aws_sts_region"`
|
|
AwsStsSessionName string `json:"aws_sts_session_name"`
|
|
AwsStsTimeout uint64 `json:"aws_sts_timeout"`
|
|
BufferedLogMax uint64 `json:"buffered_log_max"`
|
|
CarverBlockSize uint32 `json:"carver_block_size"`
|
|
CarverCompression bool `json:"carver_compression"`
|
|
CarverContinueEndpoint string `json:"carver_continue_endpoint"`
|
|
CarverDisableFunction bool `json:"carver_disable_function"`
|
|
CarverExpiry uint32 `json:"carver_expiry"`
|
|
CarverStartEndpoint string `json:"carver_start_endpoint"`
|
|
ConfigAcceleratedRefresh uint64 `json:"config_accelerated_refresh"`
|
|
ConfigCheck bool `json:"config_check"`
|
|
ConfigDump bool `json:"config_dump"`
|
|
ConfigEnableBackup bool `json:"config_enable_backup"`
|
|
ConfigPath string `json:"config_path"`
|
|
ConfigPlugin string `json:"config_plugin"`
|
|
ConfigRefresh uint64 `json:"config_refresh"`
|
|
ConfigTlsEndpoint string `json:"config_tls_endpoint"`
|
|
ConfigTlsMaxAttempts uint64 `json:"config_tls_max_attempts"`
|
|
Daemonize bool `json:"daemonize"`
|
|
DatabaseDump bool `json:"database_dump"`
|
|
DatabasePath string `json:"database_path"`
|
|
DecorationsTopLevel bool `json:"decorations_top_level"`
|
|
DisableAudit bool `json:"disable_audit"`
|
|
DisableCaching bool `json:"disable_caching"`
|
|
DisableCarver bool `json:"disable_carver"`
|
|
DisableDatabase bool `json:"disable_database"`
|
|
DisableDecorators bool `json:"disable_decorators"`
|
|
DisableDistributed bool `json:"disable_distributed"`
|
|
DisableEnrollment bool `json:"disable_enrollment"`
|
|
DisableEvents bool `json:"disable_events"`
|
|
DisableExtensions bool `json:"disable_extensions"`
|
|
DisableHashCache bool `json:"disable_hash_cache"`
|
|
DisableLogging bool `json:"disable_logging"`
|
|
DisableReenrollment bool `json:"disable_reenrollment"`
|
|
DisableTables string `json:"disable_tables"`
|
|
DisableWatchdog bool `json:"disable_watchdog"`
|
|
DistributedDenylistDuration uint64 `json:"distributed_denylist_duration"`
|
|
DistributedInterval uint64 `json:"distributed_interval"`
|
|
DistributedLoginfo bool `json:"distributed_loginfo"`
|
|
DistributedPlugin string `json:"distributed_plugin"`
|
|
DistributedTlsMaxAttempts uint64 `json:"distributed_tls_max_attempts"`
|
|
DistributedTlsReadEndpoint string `json:"distributed_tls_read_endpoint"`
|
|
DistributedTlsWriteEndpoint string `json:"distributed_tls_write_endpoint"`
|
|
DockerSocket string `json:"docker_socket"`
|
|
EnableExtensionsWatchdog bool `json:"enable_extensions_watchdog"`
|
|
EnableFileEvents bool `json:"enable_file_events"`
|
|
EnableForeign bool `json:"enable_foreign"`
|
|
EnableNumericMonitoring bool `json:"enable_numeric_monitoring"`
|
|
EnableTables string `json:"enable_tables"`
|
|
EnableWatchdogDebug bool `json:"enable_watchdog_debug"`
|
|
EnrollAlways bool `json:"enroll_always"`
|
|
EnrollSecretEnv string `json:"enroll_secret_env"`
|
|
EnrollSecretPath string `json:"enroll_secret_path"`
|
|
EnrollTlsEndpoint string `json:"enroll_tls_endpoint"`
|
|
Ephemeral bool `json:"ephemeral"`
|
|
EsFimEnableOpenEvents bool `json:"es_fim_enable_open_events"`
|
|
EventsExpiry uint64 `json:"events_expiry"`
|
|
EventsMax uint64 `json:"events_max"`
|
|
EventsOptimize bool `json:"events_optimize"`
|
|
ExperimentList string `json:"experiment_list"`
|
|
ExtensionsAutoload string `json:"extensions_autoload"`
|
|
ExtensionsDefaultIndex bool `json:"extensions_default_index"`
|
|
ExtensionsInterval string `json:"extensions_interval"`
|
|
ExtensionsRequire string `json:"extensions_require"`
|
|
ExtensionsSocket string `json:"extensions_socket"`
|
|
ExtensionsTimeout string `json:"extensions_timeout"`
|
|
Force bool `json:"force"`
|
|
HashCacheMax uint32 `json:"hash_cache_max"`
|
|
HostIdentifier string `json:"host_identifier"`
|
|
IgnoreTableExceptions bool `json:"ignore_table_exceptions"`
|
|
Install bool `json:"install"`
|
|
KeychainAccessCache bool `json:"keychain_access_cache"`
|
|
KeychainAccessInterval uint32 `json:"keychain_access_interval"`
|
|
LoggerEventType bool `json:"logger_event_type"`
|
|
LoggerKafkaAcks string `json:"logger_kafka_acks"`
|
|
LoggerKafkaBrokers string `json:"logger_kafka_brokers"`
|
|
LoggerKafkaCompression string `json:"logger_kafka_compression"`
|
|
LoggerKafkaTopic string `json:"logger_kafka_topic"`
|
|
LoggerMinStatus int32 `json:"logger_min_status"`
|
|
LoggerMinStderr int32 `json:"logger_min_stderr"`
|
|
LoggerMode string `json:"logger_mode"`
|
|
LoggerNumerics bool `json:"logger_numerics"`
|
|
LoggerPath string `json:"logger_path"`
|
|
LoggerPlugin string `json:"logger_plugin"`
|
|
LoggerRotate bool `json:"logger_rotate"`
|
|
LoggerRotateMaxFiles uint64 `json:"logger_rotate_max_files"`
|
|
LoggerRotateSize uint64 `json:"logger_rotate_size"`
|
|
LoggerSnapshotEventType bool `json:"logger_snapshot_event_type"`
|
|
LoggerStderr bool `json:"logger_stderr"`
|
|
LoggerSyslogFacility int32 `json:"logger_syslog_facility"`
|
|
LoggerSyslogPrependCee bool `json:"logger_syslog_prepend_cee"`
|
|
LoggerTlsBackoffMax uint64 `json:"logger_tls_backoff_max"`
|
|
LoggerTlsCompress bool `json:"logger_tls_compress"`
|
|
LoggerTlsEndpoint string `json:"logger_tls_endpoint"`
|
|
LoggerTlsMaxLines uint64 `json:"logger_tls_max_lines"`
|
|
LoggerTlsMaxLinesize uint64 `json:"logger_tls_max_linesize"`
|
|
LoggerTlsPeriod uint64 `json:"logger_tls_period"`
|
|
Logtostderr bool `json:"logtostderr"`
|
|
Nullvalue string `json:"nullvalue"`
|
|
NumericMonitoringFilesystemPath string `json:"numeric_monitoring_filesystem_path"`
|
|
NumericMonitoringPlugins string `json:"numeric_monitoring_plugins"`
|
|
NumericMonitoringPreAggregationTime uint64 `json:"numeric_monitoring_pre_aggregation_time"`
|
|
PackDelimiter string `json:"pack_delimiter"`
|
|
PackRefreshInterval uint64 `json:"pack_refresh_interval"`
|
|
Pidfile string `json:"pidfile"`
|
|
ProxyHostname string `json:"proxy_hostname"`
|
|
ReadMax uint64 `json:"read_max"`
|
|
ScheduleDefaultInterval uint64 `json:"schedule_default_interval"`
|
|
ScheduleEpoch uint64 `json:"schedule_epoch"`
|
|
ScheduleLognames bool `json:"schedule_lognames"`
|
|
ScheduleMaxDrift uint64 `json:"schedule_max_drift"`
|
|
ScheduleReload uint64 `json:"schedule_reload"`
|
|
ScheduleSplayPercent uint64 `json:"schedule_splay_percent"`
|
|
ScheduleTimeout uint64 `json:"schedule_timeout"`
|
|
SpecifiedIdentifier string `json:"specified_identifier"`
|
|
Stderrthreshold int32 `json:"stderrthreshold"`
|
|
TableDelay uint64 `json:"table_delay"`
|
|
ThriftStringSizeLimit int32 `json:"thrift_string_size_limit"`
|
|
ThriftTimeout uint32 `json:"thrift_timeout"`
|
|
ThriftVerbose bool `json:"thrift_verbose"`
|
|
TlsClientCert string `json:"tls_client_cert"`
|
|
TlsClientKey string `json:"tls_client_key"`
|
|
TlsDisableStatusLog bool `json:"tls_disable_status_log"`
|
|
TlsEnrollMaxAttempts uint64 `json:"tls_enroll_max_attempts"`
|
|
TlsEnrollMaxInterval uint64 `json:"tls_enroll_max_interval"`
|
|
TlsHostname string `json:"tls_hostname"`
|
|
TlsServerCerts string `json:"tls_server_certs"`
|
|
TlsSessionReuse bool `json:"tls_session_reuse"`
|
|
TlsSessionTimeout uint32 `json:"tls_session_timeout"`
|
|
Uninstall bool `json:"uninstall"`
|
|
Verbose bool `json:"verbose"`
|
|
WatchdogDelay uint64 `json:"watchdog_delay"`
|
|
WatchdogForcedShutdownDelay uint64 `json:"watchdog_forced_shutdown_delay"`
|
|
WatchdogLatencyLimit uint64 `json:"watchdog_latency_limit"`
|
|
WatchdogLevel int32 `json:"watchdog_level"`
|
|
WatchdogMemoryLimit uint64 `json:"watchdog_memory_limit"`
|
|
WatchdogUtilizationLimit uint64 `json:"watchdog_utilization_limit"`
|
|
YaraDelay uint32 `json:"yara_delay"`
|
|
YaraSigurlAuthenticate bool `json:"yara_sigurl_authenticate"`
|
|
|
|
// embed the os-specific structs
|
|
OsqueryCommandLineFlagsLinux
|
|
OsqueryCommandLineFlagsWindows
|
|
OsqueryCommandLineFlagsMacOS
|
|
OsqueryCommandLineFlagsHidden
|
|
}
|