You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Dec 15, 2020. It is now read-only.
Feature-request:
I'd like to be able to map the host_name column that is displayed in the ui, to different osquery field because in my usecase osquery registers the host_name for all nodes as localhost. (because we consistently configure /etc/hosts with a 3rd hostname. ie 127.0.0.1 localhost hostname1
so what this produces is
hostname: localhost
computer_name as
local_hostname as localhost
but as I read here osquery/osquery#4371 this is expected behavior and other OSes may behave differently... So I think the way it should be implemented is that I should be able to specify on a per OS basis.
looking at the osquery code for how these are determined and populated in osquery's database, I see they are doing it differently between platforms so it would be ideal if I could specify computer_name for linux, and maybe local_hostname for macos, etc.
The text was updated successfully, but these errors were encountered:
Feature-request:
I'd like to be able to map the host_name column that is displayed in the ui, to different osquery field because in my usecase osquery registers the host_name for all nodes as localhost. (because we consistently configure /etc/hosts with a 3rd hostname. ie
127.0.0.1 localhost hostname1
so what this produces is
hostname: localhost
computer_name as
local_hostname as localhost
but as I read here osquery/osquery#4371 this is expected behavior and other OSes may behave differently... So I think the way it should be implemented is that I should be able to specify on a per OS basis.
looking at the osquery code for how these are determined and populated in osquery's database, I see they are doing it differently between platforms so it would be ideal if I could specify computer_name for linux, and maybe local_hostname for macos, etc.
The text was updated successfully, but these errors were encountered: