Project

General

Profile

Actions

User story #15155

closed

Add methods to define variables from osquery queries

User story #15155: Add methods to define variables from osquery queries

Added by Alexis Mousset over 6 years ago. Updated over 3 years ago.

Status:
Released
Priority:
N/A
Category:
Generic methods
Target version:
UX impact:
Suggestion strength:
User visibility:
Effort required:
Name check:
Reviewed
Fix check:
Checked
Regression:

Description

  • variable_string_from_osquery
  • variable_dict_from_osquery

Related issues 1 (0 open1 closed)

Related to Rudder - Bug #15658: Fix unexpected report in osquery methodReleasedBenoît PECCATTEActions

Updated by Alexis Mousset over 6 years ago Actions #1

  • Status changed from New to In progress

Updated by Alexis Mousset over 6 years ago Actions #2

  • Subject changed from Add methods to define variables for osquery queries to Add methods to define variables from osquery queries
  • Status changed from In progress to New

Updated by Alexis Mousset over 6 years ago Actions #3

  • Status changed from New to Pending technical review
  • Assignee changed from Alexis Mousset to Benoît PECCATTE
  • Pull Request set to https://github.com/Normation/ncf/pull/997

Updated by Vincent MEMBRÉ over 6 years ago Actions #4

  • Target version changed from 5.0.12 to 5.0.13

Updated by Rudder Quality Assistant over 6 years ago Actions #6

  • Assignee changed from Benoît PECCATTE to Alexis Mousset

Updated by Alexis Mousset over 6 years ago Actions #7

  • Status changed from Pending technical review to Pending release

Updated by François ARMAND over 6 years ago Actions #8

  • Fix check changed from To do to Checked

Test: some caveat that should be documented:

- osquery needs to be installed. It's documented in "setup", but perhaps it could get a bit of emphasis:

This method requires the presence of <a href="https://osquery.io/">osquery</a> on the target nodes.
This method requires the presence of <a href="https://osquery.io/">osquery</a> on the target nodes.
It won't install it automatically. Check the correct way of doing so for your OS.

- you can't use "osquery" variable prefix, which is extremely suprising. If you do so, you get:

   error: Remote bundle variable injection detected!
   error: Variable identifier 'osquery.foo' is not legal
   error: Promise belongs to bundle 'variable_dict_from_osquery' in file '/var/rudder/ncf/common/30_generic_methods/variable_dict_from_osquery.cf' near line 81

I'm opening a ticket for these two enhancements.

Updated by François ARMAND over 6 years ago Actions #9

  • Related to Bug #15658: Fix unexpected report in osquery method added

Updated by Alexis Mousset over 6 years ago Actions #10

  • Name check changed from To do to Reviewed

Updated by Vincent MEMBRÉ over 6 years ago Actions #11

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 5.0.13 which was released today.

Updated by Alexis Mousset over 3 years ago Actions #12

  • Project changed from 41 to Rudder
  • Category changed from Generic methods to Generic methods
Actions

Also available in: PDF Atom