Tomas Touceda
036093874d
Add cursor pagination to list hosts ( #3120 )
...
* Add cursor pagination to list hosts
* Update docs
* Update based on review comments
2021-11-29 15:06:00 -03:00
Lucas Manuel Rodriguez
964f85b174
Amend policy creation and spec (for proprietary query), and add update APIs ( #2890 )
...
* Amend policy creation (proprietary query), add update APIs
* Fix Datastore.SavePolicy bug (and add tests)
* Add integration tests for new policy APIs
* Add author email
* Add activities
* Push breaking changes for return policy fields
* WIP
* Add integration test for host policies
* Make more improvements to policy representation
* Improve upgrade code (from PR review comments)
* PR changes
* Revert activities for policies
* Use *uint instead of uint for queryID, use fleet.PolicyPayload
* Filter out other schemas
* New policy flow (#2922 )
* created new policy flow -- no API connection
* added api props
* fixed prop name
* lint fixes
* removed unused modal; fixed style
* name, desc icons; created global components
* lint fixes
* ignoring certain files and lines for prettier
* Update frontend/pages/policies/PolicyPage/PolicyPage.tsx
* Make policy names unique across deployment
* Amend upgrade script
* Fix migration for unique names
* Do not deduplicate but instead rename policies
Co-authored-by: Martavis Parker <47053705+martavis@users.noreply.github.com>
2021-11-24 14:16:42 -03:00
RachelElysia
5dd2b5c0ad
Update 13-Vulnerability-Processing.md ( #3025 )
...
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
2021-11-23 15:53:40 -05:00
Tomas Touceda
c65f8507fe
Remove host counts from software ( #3082 )
...
* Remove host counts from software
* Actually remove the host count from the struct
* Fix get test
2021-11-23 15:50:51 -03:00
Noah Talerman
cca1e2e043
Update "Adding hosts" documentation to emphasize osquery installers ( #2956 )
...
- Emphasize generating an "osquery installer" (also referred as "Orbit") using the `fleetctl package` command
- Add instructions for adding multiple hosts and automatically adding hosts to a team
- Remove instructions for generating an enrollment package with the tooling in `tools/mac/`
- Remove the `tools/mac/` directory from the repository because it is no longer used or referenced in any documentation
- Update "Automatically adding hosts to a team" section of "Teams" documentation to point to "Adding hosts" documentation
- Add instructions for migrating from plain osquery to Fleet's osquery installers
2021-11-19 09:38:01 -05:00
gillespi314
bfdedd65e8
Allow API user to delete all team secrets ( #2941 )
2021-11-17 10:26:24 -06:00
eashaw
b7f2f3a0f0
Add questions to using Fleet FAQ and deployment FAQ ( #2912 )
...
* add faq questions
* Apply suggestions from code review
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
* fix broken links
* Update FAQ.md
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2021-11-15 17:55:57 -06:00
RachelElysia
a7c6b3e7d7
Add/Edit/Delete enroll secret UI ( #2645 )
2021-11-15 16:16:06 -05:00
Martin Angers
a4b0d9d4a1
Add team_id to host summary when filtered for a specific team ( #2869 )
2021-11-15 09:56:13 -05:00
Martin Angers
348841c90b
Add explanation output to fleetctl package ( #2864 )
2021-11-15 08:40:58 -05:00
Noah Talerman
8c0c00884f
Fix broken link in "Osquery logs" documentation ( #2906 )
...
- Fix a broken link in the summary of the "Osquery logs" documentation
- Update instructions for linking to a specific section within a page in the Fleet documentation in product handbook
2021-11-12 17:40:32 -05:00
gillespi314
6520e90006
Update API docs for host.users.shell
2021-11-12 16:03:11 -06:00
Benjamin Edwards
44add9cc2b
snowflake & splunk logging destination documentation ( #2889 )
...
Add documentation for forwarding osquery logs to Splunk and Snowflake.
2021-11-12 17:01:58 -05:00
Noah Talerman
de1084e920
Update documentation for /policies API routes ( #2892 )
...
- Update note to inform users to expect breaking changes in Fleet 4.7.0
2021-11-12 09:08:02 -05:00
Lucas Manuel Rodriguez
1f560c56a2
Return all scheduled queries and their stats on the host fetch API ( #2855 )
...
* Return all scheduled queries and their stats on the host fetch API (pack_stats)
* Use 'pack' instead of null and wrap errs with ctxerr
2021-11-12 08:18:25 -03:00
Tomas Touceda
a0730ca643
Add update invite API ( #2837 )
2021-11-11 17:33:06 -03:00
gillespi314
229b91b530
Add endpoint for management of team enroll secrets ( #2849 )
2021-11-11 10:45:39 -06:00
Noah Talerman
f9d249882c
In API docs, update description for GET /software parameters ( #2870 )
...
- Update the specified filterable and searchable fields in `order_key`'s and `query`'s descriptions
2021-11-11 10:06:05 -05:00
Tomas Touceda
b802af6f44
Add host count to software API ( #2879 )
...
* Add host count to software API
* Update docs
* Update fleetctl tests to account for host counts
* Update docs to mention host_count special case
* Update func comment
2021-11-11 08:49:17 -03:00
Martin Angers
b57b64ccb2
Add total and per platform counts to host summary endpoint ( #2845 )
2021-11-09 09:35:36 -05:00
Noah Talerman
ce4a3a84d2
Update documentation for /policies API routes ( #2840 )
...
- Add note that calls out breaking changes coming in the planned Fleet 4.6.0 release
- Add example policy
2021-11-08 13:57:08 -05:00
Martin Angers
1b5ec19cf5
Add author_email to payload of queries (Get/List) ( #2798 )
2021-11-08 09:06:56 -05:00
eashaw
76c5e2944f
Update adding hosts documentation ( #2810 )
...
* orbit -> fleetctl package
* Update docs/01-Using-Fleet/04-Adding-hosts.md
* Update docs/01-Using-Fleet/04-Adding-hosts.md
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2021-11-05 12:20:28 +09:00
Lucas Manuel Rodriguez
21908f31cf
GET packs to always return disabled field ( #2799 )
2021-11-04 14:25:08 -03:00
Noah Talerman
5d926a4aed
Add a new "API for contributors" documentation page ( #2743 )
...
- Add `07-API-for-contributors.md` documentation page
- Move all API routes used exclusively by the Fleet UI and fleetctl clients into the new documentation page
2021-11-01 11:38:34 -04:00
Noah Talerman
45c5e29ca0
Update permissions documentation ( #2721 )
...
- Removed create/edit/delete enroll secret permissions from team level users
- Update verbiage to clarify the distinction between users with global access and users with team access.
2021-10-28 13:27:03 -05:00
eashaw
59a6dde7d1
fix code block and indentation ( #2672 )
2021-10-28 10:24:52 -05:00
Noah Talerman
e65bfc8185
Update "Learn how to use Fleet" ( #2722 )
...
* Add 3 policies and update contributor instructions
* Update capitalization
* Add policy kind option
* Add policies spec
* Remove the 'purpose' field
* Add single policy yaml documents. Update Learn how to use Fleet.
* Remove no longer relevant screenshot of live query results
* Revert changes to standard query library
* Revert changes to standard query library
* Update docs/01-Using-Fleet/00-Learn-how-to-use-Fleet.md
typo fix.
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2021-10-28 12:31:59 +09:00
eashaw
37a960e15d
Add documentation about vulnerability processing results ( #2688 )
...
* add faq entry about CVE detection
* Add line about where to find CVE detections
* Revert "add faq entry about CVE detection"
This reverts commit 13f623c147efbd9f29294839be7089c5b204a542.
* results section
* Update 13-Vulnerability-Processing.md
* Update 13-Vulnerability-Processing.md
* Apply suggestions from code review
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
* changing placeholder text to use brackets instead of `<>`
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2021-10-28 12:28:50 +09:00
Tomas Touceda
623a38aa9d
Live queries post merge fixes ( #2684 )
...
* Refactor based on PR review comments
* Use deadline instead of duration
* Address review comments
* Only set the timeout once
2021-10-26 16:12:07 -03:00
Tomas Touceda
79f2c7c391
Issue 1798 rest api for live queries ( #2675 )
...
* wip
* wip
* Make tests not flaky
* Add changes file
* Make logging and authz thread safe
* Move cancel defer below err check
2021-10-26 11:33:31 -03:00
Lucas Manuel Rodriguez
fb1e78d039
Make /refetch run labels and policies for the host ( #2651 )
...
* Make /refetch run labels and policies for the host
* PR rework changes
2021-10-25 15:46:49 -03:00
Noah Talerman
11ecb7c1f7
Fix query syntax for several queries in the standard query library ( #2664 )
...
Fix syntax for the following queries:
- Get user files matching a specific hash
- Check for artifacts of the Floxif trojan
- Get malicious Python backdoors
2021-10-25 11:37:28 -04:00
eashaw
675f14b16b
Standard query library updates ( #2546 )
...
* update Floxif trojan query description, Add puffyCid's query, update query description styles
* Update standard-query-library.yml
2021-10-23 06:58:34 +09:00
RachelElysia
36babcc510
UI feature: Frontend of performance impact bubbles ( #2589 )
...
Includes backend fixes and test
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2021-10-22 16:05:49 -04:00
Benjamin Edwards
0fb6416d45
Add Cloudwatch monitoring to AWS Terraform configs ( #2485 )
...
* add support for minio backend file carving
* add changes file
* rds alarm and sns topic
* added cloudwatch alarm documenation
* Update docs/01-Using-Fleet/06-Monitoring-Fleet.md
* update aws provider version to fix bug in ecs container insights, add more redis alerts
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2021-10-22 15:38:00 -04:00
Noah Talerman
887b3fa3ed
Add FAQ question and answer for "Why my host is not updating a policy's response" ( #2641 )
2021-10-22 15:28:43 -04:00
Lucas Manuel Rodriguez
54805b5b72
Perform early session check on fleetctl commands ( #2620 )
...
* Perform early session check on fleetctl
* Add fleetctl test for the early session check
2021-10-22 15:41:17 -03:00
Luke Heath
99673eb148
Fix broken links to docs ( #2561 )
2021-10-22 12:39:20 -05:00
Lucas Manuel Rodriguez
91ae5ba870
By default, force password reset on CreateUser ( #2570 )
...
* By default, force password reset on CreateUser
* Use ptr.Bool and add test
* Add changes file
* Simple fix for e2e tests
* Add API changes
2021-10-21 15:00:38 -03:00
m4wh6k
b856f351b0
Fix broken link on QueriesListWrapper and in docs to std query lib docs ( #2614 )
2021-10-20 16:53:01 -07:00
Tomas Touceda
c2696c1261
Issue 1892 query perf everywhere ( #2580 )
...
* wip
* wip
* wip
* Add performance stats
* Add docs and other self review fixes
* lint
* Update based on review comments
* Add quick cleanup first and then reset to 1hr
* Reduce the load in the test
2021-10-20 18:35:38 -03:00
Tomas Touceda
cbe931c0e9
Add vulnerable filter for software and also wire up the query search ( #2604 )
...
* Add vulnerable filter for software and also wire up the query search
* Add documentation
* Update to use software list options
2021-10-20 18:01:20 -03:00
Zach Wasserman
92e3e83a74
Remove software object in list host API example ( #2608 )
2021-10-20 13:27:33 -07:00
Zach Wasserman
0a94cc9fa0
Update enroll secrets/teams docs ( #2588 )
2021-10-20 10:14:35 -07:00
Tomas Touceda
c3f7577bd8
Add query description and resolution to the list of policies in hosts ( #2584 )
...
* Add query description and resolution to the list of policies in hosts
* Add docs
* Fix get host tests
2021-10-20 12:07:16 -03:00
Tomas Touceda
89c6d18ed2
Issue 2293 reveal failing policies list host ( #2528 )
...
* Add host issues
* Update docs
* Remove comment
* Update tests
2021-10-15 07:34:30 -03:00
Tomas Touceda
d3a0d62902
Issue 2456 policies yaml ( #2512 )
...
* wip
* Add policy specs support
* Add documentation
* Make policy apply idempotent
* Fold in code
* Improve tests and simplify auth checks
* Lint and fix test
2021-10-15 07:34:11 -03:00
Tomas Touceda
bb1dc401a3
Load vulnerabilities alongisde the software ( #2518 )
...
* Load vulnerabilities alongisde the software
* Update docs
2021-10-14 13:51:41 -03:00
Tomas Touceda
0510075398
Issue 2134 add team admin role ( #2499 )
...
* wip
* Add team admin role and tests
* Revert change in invites
* Update permission doc
* Fix lint
2021-10-13 12:34:59 -03:00
