Project

General

Profile

Actions

User story #15155

closed

Add methods to define variables from osquery queries

Added by Alexis Mousset over 4 years ago. Updated almost 2 years ago.

Status:
Released
Priority:
N/A
Category:
Generic methods
Target version:
UX impact:
Suggestion strength:
User visibility:
Effort required:
Name check:
Reviewed
Fix check:
Checked
Regression:

Description

  • variable_string_from_osquery
  • variable_dict_from_osquery

Related issues 1 (0 open1 closed)

Related to Rudder - Bug #15658: Fix unexpected report in osquery methodReleasedBenoît PECCATTEActions
Actions #1

Updated by Alexis Mousset over 4 years ago

  • Status changed from New to In progress
Actions #2

Updated by Alexis Mousset over 4 years ago

  • Subject changed from Add methods to define variables for osquery queries to Add methods to define variables from osquery queries
  • Status changed from In progress to New
Actions #3

Updated by Alexis Mousset over 4 years ago

  • Status changed from New to Pending technical review
  • Assignee changed from Alexis Mousset to Benoît PECCATTE
  • Pull Request set to https://github.com/Normation/ncf/pull/997
Actions #4

Updated by Vincent MEMBRÉ over 4 years ago

  • Target version changed from 5.0.12 to 5.0.13
Actions #6

Updated by Rudder Quality Assistant over 4 years ago

  • Assignee changed from Benoît PECCATTE to Alexis Mousset
Actions #7

Updated by Alexis Mousset over 4 years ago

  • Status changed from Pending technical review to Pending release

Applied in changeset commit:69eb0a9204c08ede43d5027616d71fe78e23d0bf.

Actions #8

Updated by François ARMAND over 4 years ago

  • Fix check changed from To do to Checked

Test: some caveat that should be documented:

- osquery needs to be installed. It's documented in "setup", but perhaps it could get a bit of emphasis:

This method requires the presence of <a href="https://osquery.io/">osquery</a> on the target nodes.
This method requires the presence of <a href="https://osquery.io/">osquery</a> on the target nodes.
It won't install it automatically. Check the correct way of doing so for your OS.

- you can't use "osquery" variable prefix, which is extremely suprising. If you do so, you get:

   error: Remote bundle variable injection detected!
   error: Variable identifier 'osquery.foo' is not legal
   error: Promise belongs to bundle 'variable_dict_from_osquery' in file '/var/rudder/ncf/common/30_generic_methods/variable_dict_from_osquery.cf' near line 81

I'm opening a ticket for these two enhancements.

Actions #9

Updated by François ARMAND over 4 years ago

  • Related to Bug #15658: Fix unexpected report in osquery method added
Actions #10

Updated by Alexis Mousset over 4 years ago

  • Name check changed from To do to Reviewed
Actions #11

Updated by Vincent MEMBRÉ over 4 years ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 5.0.13 which was released today.

Actions #12

Updated by Alexis Mousset almost 2 years ago

  • Project changed from 41 to Rudder
  • Category changed from Generic methods to Generic methods
Actions

Also available in: Atom PDF