Teddy Reed
b28c4d8d0f
Introduce table options ( #2101 )
...
Table options includes a change to the Registry::call API for TablePlugins.
When requesting route information or the 'columns' action, a new 'op' key is included.
2016-05-18 12:23:52 -07:00
Teddy Reed
947799d28e
Introduce within-query caching ( #2077 )
...
This adds a new optimization feature that allows expensive tables to cache
their results between JOINs. Consider JOINing a list of open sockets, for each
process, then requesting to hash each process path. This query may hash
the same path multiple times.
Within-query caching allows the hash table to respond with the previous
result of the hash request as long as the requested computation was the result
of a single query. Subsequent queries will perform subsequent hashing.
2016-05-09 10:32:33 -07:00
Teddy Reed
192953bcd3
[ Fix #2030 ] Add generate_foreign and --enable_foreign ( #2034 )
2016-04-11 09:33:45 -07:00
Teddy Reed
ebb0ab30ce
Fix shell's --profile switch
2016-03-20 16:05:13 -07:00
Teddy Reed
26c8b5640f
Fix various lint issues
2016-03-09 19:55:39 -08:00
Teddy Reed
a6c147700f
Allow NULL values, stop using -1 as int/double invalid values
2016-03-09 18:24:17 -08:00
Teddy Reed
afd17f8134
1. Reorganize RocksDB database handle into a plugin
...
2. Introduce a SQLite-based database plugin
3. Refactor database usage to include local 'fast-calls'
4. Introduce an 'ephemeral' database plugin for testing (like a mock)
2016-03-06 20:40:16 -08:00
Teddy Reed
ee1182f526
Add high level join tests for processes, file, and hash
2016-03-03 18:47:55 -08:00
Teddy Reed
489a5e839c
[ Fix #1874 ] Update SQLite to 3.12.0
2016-03-02 10:12:41 -08:00
Teddy Reed
b21c2ed943
[ #1816 ] Refactor DB instance management
2016-02-25 19:07:52 -08:00
Teddy Reed
897b2225b1
Add fstests and reduce SQLite scope
2016-02-23 17:09:02 -08:00
Teddy Reed
9a54af29ce
Bump sqlite to 3.11.0
2016-02-21 22:40:37 -08:00
Baraa Hamodi
21c2237eca
[osquery] Update copyright headers to new format.
2016-02-11 11:48:58 -08:00
Teddy Reed
cf22d4c60e
Fix -A/.all contention via do_meta_command
2016-02-06 19:20:25 -08:00
Teddy Reed
7f37304c77
Refactor dispatcher shutdown logic
2016-02-05 01:29:42 -08:00
Teddy Reed
f05cc345d3
Add an events_max limit for event buffering
2016-02-01 08:38:58 -08:00
Teddy Reed
b138c0be86
Fix constraint index checking on Linux
2016-01-27 11:38:06 -08:00
Teddy Reed
d43bc9f06f
Reduce complexity of SQLite constraints tracking
2016-01-22 12:00:04 -08:00
Teddy Reed
1a12b41d76
Promote 10.11 to default darwin package builder
2016-01-16 15:47:26 -08:00
Teddy Reed
675d1d2267
[ Fix #1714 ] Restore balance to the DOUBLE force
2015-12-09 17:28:30 -08:00
Teddy Reed
4129c6b191
Add 'AggStep0' to OpCode type discovery
...
Closes : #1699
2015-12-09 01:53:40 -08:00
Teddy Reed
ffb5b7020e
[ Fix #1693 , #1527 ] Add osquery-specific query planner output
2015-12-02 19:57:24 -08:00
Teddy Reed
ccff0c8c18
[ Fix #1686 ] Add 'subject' and 'signing_algorithm' to certificates
2015-11-29 18:32:13 -08:00
Teddy Reed
3221fbd9b3
Fix constraints stacking
2015-11-22 22:53:23 -08:00
Teddy Reed
98f212e7a9
Add a SQLite query planner for type detection
2015-11-15 13:56:16 -08:00
Teddy Reed
e1d7511600
Remove column type string representations
2015-11-14 15:57:30 -08:00
Teddy Reed
c2be670806
Table results caching
...
1. Table implementations (spec files) can mark the table as 'cachable'.
2. Cached results depend on the shortest/quickest interval of scheduled
queries that act on results of the table.
3. The table API generator blocks caching on index/additional/required
table column options.
2015-11-14 15:57:23 -08:00
Teddy Reed
402490e75b
Attempt to improve DB/query performance
2015-11-02 10:57:01 -08:00
Teddy Reed
a1a9131174
Optimize socket_events and Linux users
2015-11-02 10:37:56 -08:00
Teddy Reed
b97a2bcdb9
Merge pull request #1618 from theopolis/clang_addr_sanitize_3.7
...
Passing clang Address/Leak Sanitize version 3.7
2015-11-01 16:23:31 -08:00
Teddy Reed
6a07135648
Passing clang Address/Leak Sanitize version 3.7
2015-11-01 04:00:21 -08:00
Teddy Reed
d27a7ecc4c
Fix clang warnings, promote warnings to errors
2015-11-01 02:12:07 -08:00
Robert C. Seacord
7a87be9ada
more sign coversion errors
2015-10-20 06:08:01 +00:00
Robert C. Seacord
e57828aac3
changes for integer sign problems
2015-10-17 00:18:35 +00:00
Robert C. Seacord
acb2f6f628
eliminating diagnostics, mostly for comparisons between signed and unsigned operations
2015-10-16 16:10:37 +00:00
Robert C. Seacord
37b8e83a9e
fixes for problems related to unsigned to signed integer comparisons
2015-10-16 16:10:36 +00:00
Teddy Reed
5890901c00
Add state, group, and nice to processes
2015-09-24 13:11:46 -07:00
Mike Arpaia
aaa03a1058
Distributed queries client-side
2015-09-08 13:33:48 -07:00
Teddy Reed
bdadc9753b
Additional OS X table performance improvements
2015-08-18 01:35:10 -07:00
Teddy Reed
ff926730a9
Remove VirtualTable matrix rotation
2015-08-17 16:58:54 -07:00
Teddy Reed
68d7a6e0be
Speedup type conversions, yara, and 10.10 symbols at runtime
2015-08-13 18:04:03 -07:00
Michael O'Farrell
eefccf27b1
Switch boost lexical casts to strtol. This should be faster than a boost lexical cast.
2015-08-07 16:33:32 -07:00
Teddy Reed
67b0f51ab5
Several small optimizations around internal SQL queries
2015-08-03 07:56:55 -07:00
Teddy Reed
ff9cb71628
Various additional tests and benchmarks
2015-07-28 12:26:17 -07:00
Teddy Reed
deecef81c5
Fix broken JOIN predicate passing
2015-07-16 11:29:56 -07:00
Teddy Reed
d3424f5831
Fix getifaddrs checking
2015-07-08 22:37:35 -07:00
Michael O'Farrell
ba28b47239
Merge pull request #1298 from theopolis/event_streams
...
Event index time and streaming
2015-07-07 18:27:35 -07:00
Teddy Reed
bf65e3d2d6
Event index time and streaming
2015-07-07 00:44:57 -07:00
Teddy Reed
a8813ab7d8
Some tweaks to estimated scratch/heap for SQLite and RocksDB
2015-07-02 13:52:39 -07:00
Teddy Reed
37188f788b
Fixups in tables, add DOUBLE, shell extensions
2015-06-22 04:17:23 -04:00
