The Wayback Machine - http://web.archive.org/web/20200706162555/https://github.com/topics/osquery
Skip to content
#

osquery

Here are 63 public repositories matching this topic...

ghost
ghost commented Nov 19, 2018

I am looking for how to install and use PULSAR for FIM monitoring ,

The repo has been changed three times from the looks to what it is now. And from the look it looks like this has gone to the standalone app called hubble , but I don't see anyway to run, execute , or configure pulsar in hubble.

Here is the documentation , let me know which should I be following for this.

https://hubbl

avcarrillo
avcarrillo commented Aug 29, 2019

While trying to track down a memory leak with my extension, I found there is a race condition.

When running the example and using the -race flag with go run, there is a race condition

C:\Users..\go\src\test\osquery>go run -race main.go \.\pipe\osquery.em

WARNING: DATA RACE
Read at 0x00c0000c6960 by goroutine 10:
git.apache.org/thrift.git/lib/go/thrift.(*TStandardC

sergiopatino
sergiopatino commented May 27, 2017

In order to properly enable the syslog pipe we need to add --enable_syslog to /etc/osquery/osquery.flags. The current behavior add the rsyslog configuration but the pipe is not being created by osqueryd on startup because --enable_syslog is not part of the startup flags.

for now I'm adding this to my wrapper to resolve:

file '/etc/osquery/osquery.flags' do
content '--enable_syslog'
mod

Improve this page

Add a description, image, and links to the osquery topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the osquery topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.