empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 00:45:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update osquery loadtest guide (#14886)

Browse Source
This commit is contained in:
Lucas Manuel Rodriguez 2023-11-02 15:13:42 -03:00 committed by GitHub
parent b04b20fcf0
commit bf1c6baa1f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
tools/loadtest/osquery/README.md
View File

@ -1,16 +1,13 @@
# Load test of osquery queries in macOS and Windows
Following are the steps to load test osquery on macOS and Windows.
Following are the steps to load test osquery on macOS, Windows and Linux.
The purpose is to know the impact of Fleet provided queries on real devices.
> The scripts that process osquery logs were written and tested on macOS.
> At the time of writing, the changes that add watchdog logging needed for this script are
> merged but not released yet (https://github.com/osquery/osquery/pull/8070).
> You will have to download and extract the osqueryd executable from the PR: https://github.com/osquery/osquery/suites/14033523376/artifacts/783724086
## Requirements
- Osquery [v5.10.2](https://github.com/osquery/osquery/releases/tag/5.10.2) (the `--enable_watchdog_debug` flag was added on v5.10.2).
- Install gnuplot and ripgrep, e.g. on macOS:
```sh
brew install gnuplot ripgrep
@ -175,6 +172,7 @@ sudo ENROLL_SECRET=<...> /opt/osquery/bin/osqueryd \
```
### Run osqueryi (shell)
If you just need the osquery shell, and do not need to connect to Fleet server.
```shell