fleet/changes
Lucas Manuel Rodriguez ab0700b4e0
Fix osquery result logging when queries are configured outside of Fleet (#15393)
#15168

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests.
- [X] Manual QA for all new/changed functionality.

The issue can be reproduced by running `osqueryd` with
`--config_plugin=filesystem --config_path=/path/to/config.json`
This means the osquery config is fetched from a file rather than from
Fleet's agent settings.
The `/path/to/config.json` has the agent settings, e.g.:
```
{
  "decorators": {
    "load": [
      "SELECT uuid AS host_uuid FROM system_info;",
      "SELECT hostname AS hostname FROM system_info;"
    ]
  },
  "options": {
    "disable_distributed": false,
    "distributed_interval": 10,
    "distributed_plugin": "tls",
    "distributed_tls_max_attempts": 3,
    "logger_tls_endpoint": "/api/osquery/log",
    "logger_tls_period": 10,
    "pack_delimiter": "/"
  },
  "schedule": {
    "USB devices": {
      "query": "SELECT * FROM usb_devices;",
      "interval": 15
    },
    "OS version": {
      "query": "SELECT * FROM os_version;",
      "interval": 10
    }
  },
  "packs": {
    "Elsewhere": {
      "queries": {
        "Osquery Info": {
          "query": "SELECT * FROM osquery_info;",
          "interval": 30,
          "platform": "",
          "version": "",
          "snapshot": true
        }
      }
    }
  }
}
```

The three queries should be logged to Fleet's configured result logging
destination (default is `filesystem`).
2023-12-04 11:18:49 -03:00
..
.keep Issue 1009 calculate diff software (#1305) 2021-07-08 13:57:43 -03:00
2118-browser-extension_id Adding extension_id and browser columns to software table. (#15285) 2023-11-30 19:06:17 -06:00
14484-whitespace-in-policies UI – Show line breaks in Policy details modals (#15354) 2023-12-01 09:11:36 -08:00
14748-host-by-identifier-serial-number Add hardware serial to host by identifier search (#15353) 2023-11-29 08:39:35 -06:00
14851-table-reload fix: prevent table from rerendering when opening modals (#15375) 2023-11-30 17:21:35 -05:00
14970-line-break-in-example-command UI – Fix bug with line breaks in example command (#15331) 2023-12-01 09:11:56 -08:00
15133-screen-mdm-profiles-reserved-names Add validations to disallow custom MDM profiles that contain names reserved by Fleet (#15373) 2023-11-30 17:19:18 -06:00
15168-scheduled-outside-fleet Fix osquery result logging when queries are configured outside of Fleet (#15393) 2023-12-04 11:18:49 -03:00
15362-windows-mdm-query improve mdm_windows query to account for multiple registry entries (#15391) 2023-12-04 11:03:05 -03:00
issue-13281-backend-changes feature: windows profiles (#15349) 2023-11-29 09:32:42 -05:00
issue-14027-implement-windows-os-updates Implement Windows OS Updates (feature branch). (#15359) 2023-11-29 11:07:24 -05:00
issue-14028-support-windows-os-updates Implement Windows OS Updates (feature branch). (#15359) 2023-11-29 11:07:24 -05:00
issue-14029-apply-windows-os-updates Implement Windows OS Updates (feature branch). (#15359) 2023-11-29 11:07:24 -05:00
issue-14045-add-windows-update-activites Implement Windows OS Updates (feature branch). (#15359) 2023-11-29 11:07:24 -05:00
issue-14090-add-copied-message add copied message to copy button on input (#15366) 2023-11-29 17:27:01 +00:00
issue-14359-windows-profiles feature: windows profiles (#15349) 2023-11-29 09:32:42 -05:00
issue-14441-add-truncation-query-docs add truncation to dropdown options for the query table documentation sidebar (#15368) 2023-11-29 18:02:51 +00:00
issue-14714-fix-cached-appconfig-race Fix edge case of AppConfig changes getting lost in cached mysql. (#15352) 2023-11-29 10:09:37 -05:00