Commit Graph

115 Commits

Author SHA1 Message Date
Teddy Reed
a7c2669ba3
tidy: Improve clang-tidy (modernize) list of checks and run across codebase (#3870) 2017-10-29 22:25:49 -07:00
Alessandro Gario
58fa4a6899 Verbose logging when spawning services (#3689) 2017-10-24 19:55:05 -07:00
Alessandro Gario
0130928a24 aws_firehose: Add missing newline separator between each log line. (#3743) 2017-09-28 11:08:41 -07:00
Seshu Pasam
b6e50c5050 Avoid unnecessary ptree allocation. (#3726) 2017-09-24 21:23:53 -07:00
Alessandro Gario
641aa0321e aws_kinesis/aws_firehose: Be more verbose when complete failures occur. (#3710) 2017-09-18 20:22:40 -07:00
Allan Liu
1cd4ed949f kafka logger: Kafka producer implemented as a Logger plugin (#3155) 2017-09-09 10:38:01 -07:00
Seshu Pasam
6fab8b6083 logging: adding "counter" to differentiate initial results (#3651)
When setting up alerts for differential logs data you might want to skip the
initial added records. counter can be used to identify if the added records
are all records from initial query of if they are new records. For initial
query results that includes all records counter will be "0". For subsequent
query executions counter will be incremented by 1. When epoch changes, counter
will be reset back to "0".
2017-09-07 15:01:15 -07:00
Alessandro Gario
6489c8b050 logging: Add Firehose/Kinesis support to Windows (#3641) 2017-09-03 16:52:47 -07:00
Alessandro Gario
a3e4310188 Fix 3568: Kinesis/Firehose record size check failure (#3599) 2017-08-27 11:01:52 -07:00
Teddy Reed
48ab0c783c logger: Use a mutex to protect buffered counts (#3588) 2017-08-22 01:30:13 -07:00
Seshu Pasam
6495f14828 EC2 instance tags implementation. (#3507) 2017-08-02 13:40:59 -07:00
Zachary Wasserman
b86869208d Fix error handling in AWS logger plugins (#3426) 2017-07-22 19:41:39 -07:00
Lambda Conjecture
ecb9e2ccf2 Add Epoch marker to scheduled query results (#3378) 2017-07-07 17:56:03 -07:00
Teddy Reed
190e46f994 aws: Restore exception error printing and upgrade to 1.1.5 (#3456) 2017-07-02 20:44:06 -07:00
Teddy Reed
414cf83c6a logger: Re-add syslog logger plugin (#3401) 2017-06-13 00:23:54 -07:00
Teddy Reed
616172af56 logger: Rename BufferedLogSink instance and other nits (#3361) 2017-05-29 22:23:36 -07:00
Teddy Reed
8a93acfa1c TSAN: Address failures and findings in LLVM 4.0 (#3343) 2017-05-29 02:06:57 -07:00
Teddy Reed
fb287745c6 linux: Use lld and ThinLTO on Linux (#3284) 2017-05-14 14:23:50 -07:00
Teddy Reed
2e6947642a logger: Relay status logs to the enabled log sinks (#3275) 2017-05-11 21:08:14 -07:00
Teddy Reed
4372785d5d Refactor build logic to allow optional: yara, tsk, lldpd (#3226) 2017-04-28 13:45:41 -07:00
Teddy Reed
65ef94f053 logger: Fixes to allow plugins access to hostIDs (#3197) 2017-04-22 18:24:25 -07:00
yying
31b78cb996 Adding hostIdentifier, calendarTime, unixTime to status logging (#3146) 2017-04-10 11:56:23 -07:00
yying
20f8e6cd5a Adding Status Logging to AWS Kinesis/Firehose Logger Plugins (#3115) 2017-04-04 09:54:56 -07:00
Teddy Reed
c24603d8c9 logger: Add logger_min_status and disable stderr with stdout (#3131) 2017-04-04 08:12:26 -07:00
Teddy Reed
86e6bd1a73 Add additional regions to AWS Kinesis (#3013) 2017-02-21 20:52:10 -08:00
Teddy Reed
b2a90cd6e4 Do not control stderr teeing automatically (#2919) 2017-01-17 17:18:03 -08:00
Teddy Reed
0e9733f94c Simplify Registry and plugin concepts (#2887) 2017-01-07 12:21:35 -08:00
Zachary Wasserman
b855366c3b Generate random Kinesis partition keys per-record (#2872) 2016-12-16 16:34:02 -08:00
Ryan Holeman
31e395a078 Removed stream name checking for aws kinesis and firehose setup (#2867) 2016-12-15 10:56:27 -08:00
Marc LeBourdais
790aa06b51 Add a flag for prepending @cee: to json-logged messages to syslog (#2854) 2016-12-08 17:35:20 -08:00
Ryan Holeman
0b62245848 Fix for sending only failed data to kinesis on full or partial failed uploads (#2703) 2016-11-07 09:57:47 -08:00
Teddy Reed
a3acf2a3e5 Fix Config TLS plugin default verb (#2708) 2016-11-02 17:08:44 -07:00
Jonathan Lee
f529fc3a30 [Fix #2652] Shorten long lines (#2664) 2016-10-21 22:08:59 -07:00
Ryan Holeman
d76310da2c Random partition keys assigned per batch in kinesis plugin (#2662) 2016-10-21 19:43:31 -07:00
Teddy Reed
b00118a293 Fix regression in Requests/TLS APIs related to verb detection (#2660) 2016-10-21 12:58:40 -07:00
Zachary Wasserman
42fb80f40b Fix TLS logger plugin handling of re-enrollment scenarios (#2627) 2016-10-14 16:31:51 -07:00
Ryan Holeman
d1240f05e5 Fix for AWS ami role auth with cpp-netlib custom redirect condition (#2596) 2016-10-09 12:11:56 -07:00
yying
a7af70d021 Adding remote config/logging capabilities to Windows build (#2469) 2016-09-20 14:18:58 -07:00
yying
84e6a3401a Reducing compiler warnings and fails on warn in VS (#2433) 2016-09-02 15:04:03 -07:00
Teddy Reed
a2540a2614 Update to AWS-SDK-CPP version 0.14.x (#2371) 2016-08-15 21:30:39 -07:00
Teddy Reed
f93253ec48 Nitpicks and style formatting 2016-08-15 16:07:51 -07:00
Ryan Holeman
a217035d12 Add AWS STS assume role authentication capability 2016-08-15 16:07:51 -07:00
Teddy Reed
58fd284f05 Improve dispatcher tests (#2358)
This improves dispatcher tests by allowing units to act like component
tests and use embedded std::thread-based osquery APIs. A unit may force
a 'service' to run by joining the Dispatcher before deconstructing.
2016-08-14 15:41:53 -07:00
Zachary Wasserman
8aa9d63c42 Properly intialize BufferedLogForwarder for TLS output plugin (#2328)
Missing initialization of the BufferedLogForwarder was causing an underflow in
the count of buffered logs, and error messages as described in #2324. This
commit brings the initialization of the forwarder for TLS in line with
aws_kinesis and aws_firehose, removing that error.
2016-08-08 15:20:25 -07:00
Zachary Wasserman
1074aad471 Use TLSTransport HTTP client in aws_util (#2299) 2016-07-28 23:09:28 -04:00
Zachary Wasserman
129ec81853 Add release valve for purging buffered logs in BufferedLogForwarder (#2244) 2016-07-27 15:26:45 -07:00
yying
2fb3797c53 Changes to support building a osquery Windows service. (#2278) 2016-07-22 13:29:37 -07:00
Teddy Reed
7f304a0934 Various fixups and best practices (#2237) 2016-07-11 09:45:57 -07:00
Teddy Reed
48cb4d555d Add systemLog API (#2229)
This includes a minor SDK refactor as it move quite a few specialized
functions and facilities from core.h into system.h. There was a breaking point
for needing to frequently update core includes.

The new logger systemLog function allows a call site to bypass logging config
and write a line to the OS logger (aka syslog).
2016-07-07 15:16:28 -07:00
Zachary Wasserman
8909602a40 Increase block period in flaky BufferedForwarder test (#2222)
This test was intermittently failing because it relies on the actual thread
scheduling. Our discussion in issue #2218 decided that it was worth keeping the
test around, while trying to mitigate the flakiness. The longer sleeps in this
test ran successfully hundreds of times in local testing.
2016-07-06 14:59:24 -07:00