valitydev/osquery-1
14
0
Fork 0
mirror of https://github.com/valitydev/osquery-1.git synced 2024-11-07 09:58:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
9b881deff5
osquery-1/osquery
History
Filipe Manco 9b881deff5 Store results for differential queries serialized with types 
Summary: Every time a differential query runs we save the results to the database. We were serializing those results with or without types based on the `FLAGS_log_numerics_as_numbers` flag. However we always collect results with proper types therefore, on subsequent executions of the same query, the new results (typed) were being compared with the results retrieved from the DB (untyped if FLAGS_log_numerics_as_numbers == false), causing all results to be "different" and therefore osquery to report all results as "added" (and eventually all old results as "removed").

Reviewed By: SAlexandru

Differential Revision: D14669476

fbshipit-source-id: 8abc68cbcac90c73bd92fc8d34572ba3ee2f2c75
2019-03-28 15:11:15 -07:00
..
carver Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
config Help packs class be immutable 2019-03-28 06:59:50 -07:00
core Store results for differential queries serialized with types 2019-03-28 15:11:15 -07:00
database Remove dead code for deserializeQueryLogItem functions (#5543) 2019-03-28 14:19:16 -07:00
devtools Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
dispatcher Per owner monitoring 2019-03-15 07:20:09 -07:00
distributed Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
ev2 Remove the rest use cases of createError with message as an arg (#5524) 2019-03-13 11:36:21 -07:00
events Remove the rest use cases of createError with message as an arg (#5524) 2019-03-13 11:36:21 -07:00
examples Replace Status(0) calls with Status::success() to appease Lint (#5487) 2019-03-01 04:29:33 -08:00
experimental Remove createError() with message as one of the arguments (#5531) 2019-03-15 08:00:33 -07:00
extensions Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
filesystem Fix sign compare warning in file_compression.cpp 2019-03-25 09:28:26 -07:00
hashing Update osquery licensing wording (#5452) 2019-02-19 10:59:48 -08:00
include/osquery Remove dead code for deserializeQueryLogItem functions (#5543) 2019-03-28 14:19:16 -07:00
killswitch Remove the rest use cases of createError with message as an arg (#5524) 2019-03-13 11:36:21 -07:00
logger Set min log level when running as shell to WARNING (#5530) 2019-03-15 08:05:04 -07:00
main Fix osquery exit with wrong status 2019-03-26 15:15:20 -07:00
numeric_monitoring Remove the rest use cases of createError with message as an arg (#5524) 2019-03-13 11:36:21 -07:00
process Let's use glibc:ld thirdparty dependency instead of linker flag -ldl 2019-02-25 03:05:40 -08:00
profiler Total(user+kernel) time ODS timeseries 2019-03-18 07:59:24 -07:00
registry Move plugins to a separate directory [5/?] (#5483) 2019-03-02 04:23:06 -08:00
remote OSQueryd changes for encoding type in JSON syntax 2019-03-04 09:15:21 -08:00
sdk Introduce events stream registry (#5517) 2019-03-13 06:15:07 -07:00
sql OSQueryd changes for encoding type in JSON syntax 2019-03-04 09:15:21 -08:00
tables Fix memory leak in macos extended_attributes (#5538) 2019-03-27 07:31:36 -07:00
utils Remove createError() with message as one of the arguments (#5531) 2019-03-15 08:00:33 -07:00
BUCK temp solution for xcode support 2019-02-05 07:20:00 -08:00
empty.cpp temp solution for xcode support 2019-02-05 07:20:00 -08:00