Commit Graph

609 Commits

Author SHA1 Message Date
Kelvin Oghenerhoro Omereshone
789b1d1c20
[DOCS] add FAQ for what happens to logs if Fleet or log destination are offline (#3860)
* feat: add FAQ for what happens to logs

FAQ for what happens to log if either the Fleet's server or the log destination are offline

* fix: add the default buffered_log_max
2022-01-25 01:34:59 +01:00
Tomas Touceda
f02bef6f2c
Add platform filter to host_summary (#3845)
* Add platform filter to host_summary

* Add documentation

* Actually forward the platform param down the chain

* Update mock

* Update mock
2022-01-24 14:49:21 -03:00
Benjamin Edwards
d650423be0
Reference Architectures (#3712)
Added reference architectures using https://docs.gitlab.com/ee/administration/reference_architectures/ as inspiration.

- updated terraform based on some feedback of usage
- pinned fleet docker version in terraform as to no get unexpected upgrades when applying
- updated some documentation around apply migration tasks
2022-01-21 16:27:55 -08:00
RachelElysia
85487eb5b2
Settings > Organization Settings: Code revamp (#3580) 2022-01-21 12:06:58 -05:00
Tomas Touceda
9d572309ae
Add sentry (#3669)
* Add sentry

* Fix gosum

* More gosum fixes

* Add missing def for config

* Enrich sentry scope a bit

* Add changes file

* Add goroutine safe scope to errors

* Encapsulate sentry logic

* Add documentation for new flag

* Add sentry capturing to crons and other background tasks

* Only send to sentry when enabled
2022-01-20 16:41:02 -03:00
Zach Wasserman
4a70cd69fa
Shorten "simple" query API period to 25s (#3775)
This helps the period stay under the default request timeouts for most
load balancers.

Some default timeouts:
* AWS ALB - 60s
* Nginx - 60s
* GCP LB - 30s
2022-01-19 17:48:57 -08:00
Kelvin Oghenerhoro Omereshone
1c4c0156e0
doc: add FAQ for orbit running alongside osquery (#3685)
* doc: add FAQ for orbit running alongside osquery

* fix: update FAQ to be more clear.

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* fix: typo on osquery

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2022-01-20 00:07:11 +01:00
Katheryn Satterlee
a9949d869e
Issue 2873 kafka docs improvement (#3771)
* Updating Upgrade docs

* making changes to database section of upgrade docs

* Corrected anchor tags, ready to merge

* Adding section for Kafka to Osquery-logs

Co-authored-by: Katheryn Satterlee <ksatter@Kathys-MacBook-Pro.local>
2022-01-19 11:59:56 -06:00
Katheryn Satterlee
331a04121a
3205 improve updating docs (#3593)
* Updating Upgrade docs

* making changes to database section of upgrade docs

* Update docs/02-Deploying/06-Upgrading-Fleet.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* Update docs/02-Deploying/06-Upgrading-Fleet.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* Update docs/02-Deploying/06-Upgrading-Fleet.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* Corrected anchor tags, ready to merge

Co-authored-by: Katheryn Satterlee <ksatter@Kathys-MacBook-Pro.local>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2022-01-19 11:25:46 +09:00
Kelvin Oghenerhoro Omereshone
dd751cccf6
docs: add description for /translate endpoint (#3715) 2022-01-18 13:23:20 -06:00
Lucas Manuel Rodriguez
d4243d0a72
Team observers can browse global policies (#3737)
* Allow team observers to browse global policies

* Add integration core test for team observer

* Fix integration tests
2022-01-18 13:18:40 -03:00
Martin Angers
f19e676e62
Refactor async host processing to avoid redis SCAN keys (for policies) (#3657) 2022-01-18 09:56:43 -05:00
Kelvin Oghenerhoro Omereshone
31459b97e4
fix: add clarity on signing and notarising on macOS (#3714)
Add clarity on signing and notarising macOS osquery installers
2022-01-17 18:30:18 +01:00
Zach Wasserman
6bc4718a20
Update FAQ for duplicate host enrollment (#3698) 2022-01-14 09:58:56 -08:00
Kelvin Oghenerhoro Omereshone
27c76a0e47
fix: update link to Orbit repository (#3684)
Current link leads to the archived Orbit repo
2022-01-14 18:25:50 +01:00
Kelvin Oghenerhoro Omereshone
5b3d7bb55c
fix: typo on indefinite article used (#3641)
Fixed the use of `an` instead of `a`
2022-01-12 17:31:17 +01:00
Martin Angers
f14f97156c
Add read and write timeout options for redis (#3624) 2022-01-11 17:08:39 -05:00
Noah Talerman
d7e013643c
Remove policies from standard-query-library.yml (#3636)
- For now, remove policies from `standard-query-library.yml` so that the `fleetctl preview` command does not fail
2022-01-11 11:30:37 -05:00
Noah Talerman
0647e0b641
Add contributors to standard policies (#3635)
- Resolve failing "Deploy Fleet Website" CI task
2022-01-11 11:11:37 -05:00
Noah Talerman
76dba03628
Add product process to handbook and update vuln processing docs (#3629)
- Add outline of the product process to handbook
- Add a "Priority drafting" section to handbook
- Update the vulnerability processing docs
2022-01-11 09:15:49 -05:00
Tomas Touceda
c662cd2b53
Add policies yaml (#3464)
* Add policies yaml

* Add documentation and address review comments

* Amend documentation
2022-01-11 11:04:29 -03:00
Kelvin Oghenerhoro Omereshone
6c851e0e12
[DOCS] add docs for signing osquery installers with fleetctl (#3577)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* chore: add dominuskelvin as maintainer

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add link to signing installers

* fix: typo with link to the getting started page

* feat: docs on how to sign an osquery installer

* feat: make signing installer a subsection of osquery installer

* feat: make description for signing installer shorter and compact

* fix: change package to installers

* fix: reword note section
2022-01-10 17:31:10 +01:00
Mike McNeil
eba183d506
add clarification about 90s timeout in new api endpoint (#3592)
* add clarification about 90s timeout

* further clarify warning based on Tomas's feedback
2022-01-06 22:51:55 -06:00
Mike Thomas
c6f9cb4cf3
Update FAQ.md (#3552)
* Update FAQ.md

Added a question about duplicate IP addresses.

* Update docs/01-Using-Fleet/FAQ.md

Add relevant link to "Fleet's teams feature..."
2022-01-05 13:25:56 +09:00
Luke Heath
a269e9a5f9
Update 02-Testing.md 2022-01-04 16:50:49 -06:00
Kelvin Oghenerhoro Omereshone
897fa82ec1
Feature/add query to get apps opened within the last 24 hours (#3513)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add query to find apps not in Applications directory

* feat: add query to find subscription based applications that have not been opened for the last 30 days
2022-01-04 22:25:18 +01:00
Noah Talerman
40ba098913
Add "Automations" documentation page (#3537)
- Add "Automations" documentation page to document the available automations in Fleet
- Update the "Vulnerability processing" documentation
- Update the "REST API" documentation
2021-12-30 17:50:27 -05:00
Sevickson
e776c2ea36
Dedup Get installed Windows software query (#3417)
python_packages query was 2 times in the same query
2021-12-27 18:39:31 -03:00
Lucas Manuel Rodriguez
787944482b
Global policies automation webhooks (#3378)
* Add webhook to app config

* Add redis failing policies set and webhook

* Add basic webhook test

* Store hostname in redis

* Global policy deletion to remove policy ID from set and config

* Also process new passing policies

* Fix unit test

* Sort hosts

* Add more tests

* Add ListSets to the failing policies interface

* Fix server URL and garbage collect on the triggering side

* Do not use Redis SCAN

* Fix Redis operation order

* Add API changes to doc

* Add comments

* Add more tests

* Fix tests

* Add tests for config update upon deletion of policies

* Run make dump-test-schema

* Ignore policies that failed to run

* Add proper unit tests to trigger logic

* Fix comments

* WIP

* Add tests to service_osquerty_test.go

* Use SSCAN for listing hosts instead of SMEMBERS

* Add failing policies to docs/01-Using-Fleet/configuration-files/README.md

* Remove skip

* Fix PR comments
2021-12-23 18:26:55 -03:00
Martin Angers
1e2059585a
Add support for google chrome profiles (#3423) 2021-12-21 15:36:19 -05:00
Omereshone Kelvin
27691fe82a
Fix a typo in a configuration flag (#3405)
Fixed a typo in the `allow_missing_migrations` configuration flag.
2021-12-21 08:19:48 -08:00
Tomas Touceda
fe67b0486b
Finish first draft of API versions (#3216)
* Finish first draft of API versions

* wip

* Finalize tests

* Revert change in handler

* Remove made up version

* Update versioning with aliases

* Add changes file

* Address review comments

* Revert overupdated routes

* Expand life time of deprecated APIs

* Fix test

* Comment out problematic part of test

* Revert bad path changes
2021-12-21 12:23:12 -03:00
Tomas Touceda
7d527f9d01
Update faq with common problem in docker (#3438) 2021-12-21 11:25:00 -03:00
Tomas Touceda
5a9e207fbf
Update documentation and add changes file (#3437) 2021-12-21 10:47:02 -03:00
Katheryn Satterlee
2c8f0dac42
Update Kafka Rest Plugin results section
Corrected `##### kafkarest_result_topic` to indicate that it set the results log location rather than status.
2021-12-20 08:06:53 -06:00
Katheryn Satterlee
9eeaf5ed16
Add links in configuration docs (#3393)
Added links from configuration docs to osquery logs docs for logging plugins. Resolves #2872
2021-12-17 18:06:41 -06:00
Mike McNeil
552b2c9f54
capitalization (#3388) 2021-12-15 16:41:48 -06:00
Tony Gauda
00ccdfdce8
Update standard-query-library.yml to detect Log4J (#3367)
Added query to detect Log4j in response to CVE-2021–44228 on macOS and Linux
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2021-12-14 14:54:11 -08:00
Martin Angers
4143a37056
Fix redis scan keys issue for live queries (#3107) 2021-12-14 16:30:26 -05:00
Zach Wasserman
ac3d8ddf02
Increase default login session length to 24 hours (#3340) 2021-12-13 20:42:30 -08:00
Noah Talerman
ca6c51d397
API docs: Add host status webhook parameters to PATCH /config docs (#3348) 2021-12-13 14:48:03 -05:00
Omereshone Kelvin
7d77579ead
Update description for query to get apple applications count (#3330) 2021-12-12 18:03:56 -08:00
Omereshone Kelvin
64203a022a
Fix duplicated description on standard query (#3286) 2021-12-12 18:02:52 -08:00
Omereshone Kelvin
8ec3986263
Fix description language on failing batteries query (#3328) 2021-12-11 16:24:41 -08:00
Omereshone Kelvin
c5aaeaab6f
Add description to windows machines with unencrypted hard disks query (#3329) 2021-12-11 16:23:42 -08:00
Noah Talerman
1f8f5b0d27
Update recieve-from-github.js and add fixes to API docs (#3310) 2021-12-10 15:40:29 -05:00
Zach Wasserman
2f4ea1da85
Update documentation for file carving (#3213) 2021-12-09 09:59:23 -08:00
Omereshone Kelvin
10871172f6
Standard query library: Add description to "Get laptops with failing batteries" (#3254) 2021-12-09 12:23:54 -05:00
Zach Wasserman
9343c9b832
Fix broken link in documentation (#3270) 2021-12-08 22:18:50 -06:00
Tony Gauda
c39191cb00
Updated docs to fix a few areas of confusion (#2903)
* updating docs to make things a bit more clear

* fixing broken links

* more broken links

* fixing broken links

* website updates

* PR review changes

* fixing bad links
2021-12-08 16:23:35 -06:00