Skip to content

Commit

Permalink
Add new query to workstations canary to help fleetd release verificat…
Browse files Browse the repository at this point in the history
…ion (#18349)

To ease verification of fleetd releases #18312.
  • Loading branch information
lucasmrod authored Apr 16, 2024
1 parent 3ef4358 commit 665ace5
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 0 deletions.
13 changes: 13 additions & 0 deletions it-and-security/lib/collect-fleetd-information.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
- name: Collect fleetd information
description: "Collects fleetd information from agents"
query: |
SELECT
os_version.platform as platform,
system_info.cpu_type as cpu_type,
osquery_info.version as osquery_version,
orbit_info.*
FROM os_version, system_info, osquery_info, orbit_info;
interval: 300 # 5 minutes
observer_can_run: true
automations_enabled: false
platform: darwin,linux,windows
1 change: 1 addition & 0 deletions it-and-security/teams/workstations-canary.yml
Original file line number Diff line number Diff line change
Expand Up @@ -111,6 +111,7 @@ policies:
- path: ../lib/linux-device-health.policies.yml
queries:
- path: ../lib/collect-failed-login-attempts.queries.yml
- path: ../lib/collect-fleetd-information.yml
- path: ../lib/collect-usb-devices.queries.yml
- path: ../lib/collect-vs-code-extensions.queries.yml
- path: ../lib/collect-software-permissions-system.queries.yml
Expand Down

0 comments on commit 665ace5

Please sign in to comment.