mirror of
https://github.com/fleetdm/fleet
synced 2026-05-21 07:58:31 +00:00
ab0700b4e0
#15168 - [X] Changes file added for user-visible changes in `changes/` or `orbit/changes/`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - [X] Added/updated tests. - [X] Manual QA for all new/changed functionality. The issue can be reproduced by running `osqueryd` with `--config_plugin=filesystem --config_path=/path/to/config.json` This means the osquery config is fetched from a file rather than from Fleet's agent settings. The `/path/to/config.json` has the agent settings, e.g.: ``` { "decorators": { "load": [ "SELECT uuid AS host_uuid FROM system_info;", "SELECT hostname AS hostname FROM system_info;" ] }, "options": { "disable_distributed": false, "distributed_interval": 10, "distributed_plugin": "tls", "distributed_tls_max_attempts": 3, "logger_tls_endpoint": "/api/osquery/log", "logger_tls_period": 10, "pack_delimiter": "/" }, "schedule": { "USB devices": { "query": "SELECT * FROM usb_devices;", "interval": 15 }, "OS version": { "query": "SELECT * FROM os_version;", "interval": 10 } }, "packs": { "Elsewhere": { "queries": { "Osquery Info": { "query": "SELECT * FROM osquery_info;", "interval": 30, "platform": "", "version": "", "snapshot": true } } } } } ``` The three queries should be logged to Fleet's configured result logging destination (default is `filesystem`). |
||
|---|---|---|
| .. | ||
| authz | ||
| bindata | ||
| config | ||
| contexts | ||
| datastore | ||
| errorstore | ||
| fleet | ||
| health | ||
| launcher | ||
| live_query | ||
| logging | ||
| mdm | ||
| mock | ||
| policies | ||
| ptr | ||
| pubsub | ||
| service | ||
| sso | ||
| test | ||
| vulnerabilities | ||
| webhooks | ||
| websocket | ||
| worker | ||
| utils.go | ||
| utils_test.go | ||