mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 10:23:54 +00:00
62 lines
1.7 KiB
C++
62 lines
1.7 KiB
C++
/*
|
|
* Copyright (c) 2014-present, Facebook, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* This source code is licensed under the BSD-style license found in the
|
|
* LICENSE file in the root directory of this source tree. An additional grant
|
|
* of patent rights can be found in the PATENTS file in the same directory.
|
|
*
|
|
*/
|
|
|
|
#include <osquery/database.h>
|
|
#include <osquery/distributed.h>
|
|
#include <osquery/flags.h>
|
|
#include <osquery/system.h>
|
|
|
|
#include "osquery/core/conversions.h"
|
|
#include "osquery/dispatcher/distributed.h"
|
|
|
|
namespace osquery {
|
|
|
|
FLAG(uint64,
|
|
distributed_interval,
|
|
60,
|
|
"Seconds between polling for new queries (default 60)")
|
|
|
|
DECLARE_bool(disable_distributed);
|
|
DECLARE_string(distributed_plugin);
|
|
|
|
const size_t kDistributedAccelerationInterval = 5;
|
|
|
|
void DistributedRunner::start() {
|
|
auto dist = Distributed();
|
|
while (!interrupted()) {
|
|
dist.pullUpdates();
|
|
if (dist.getPendingQueryCount() > 0) {
|
|
dist.runQueries();
|
|
}
|
|
|
|
std::string str_acu = "0";
|
|
Status database = getDatabaseValue(
|
|
kPersistentSettings, "distributed_accelerate_checkins_expire", str_acu);
|
|
unsigned long accelerate_checkins_expire;
|
|
Status conversion = safeStrtoul(str_acu, 10, accelerate_checkins_expire);
|
|
if (!database.ok() || !conversion.ok() ||
|
|
getUnixTime() > accelerate_checkins_expire) {
|
|
pauseMilli(FLAGS_distributed_interval * 1000);
|
|
} else {
|
|
pauseMilli(kDistributedAccelerationInterval * 1000);
|
|
}
|
|
}
|
|
}
|
|
|
|
Status startDistributed() {
|
|
if (!FLAGS_disable_distributed) {
|
|
Dispatcher::addService(std::make_shared<DistributedRunner>());
|
|
return Status(0, "OK");
|
|
} else {
|
|
return Status(1, "Distributed query service not enabled.");
|
|
}
|
|
}
|
|
}
|