Skip to content
This repository has been archived by the owner on Dec 15, 2020. It is now read-only.

Feature-request - want to be able to specify which osquery field in system_info table populates host_name in fleet mysql. #2252

Open
bbfoto opened this issue Jul 2, 2020 · 0 comments

Comments

@bbfoto
Copy link

bbfoto commented Jul 2, 2020

Feature-request:
I'd like to be able to map the host_name column that is displayed in the ui, to different osquery field because in my usecase osquery registers the host_name for all nodes as localhost. (because we consistently configure /etc/hosts with a 3rd hostname. ie
127.0.0.1 localhost hostname1

so what this produces is
hostname: localhost
computer_name as
local_hostname as localhost

but as I read here osquery/osquery#4371 this is expected behavior and other OSes may behave differently... So I think the way it should be implemented is that I should be able to specify on a per OS basis.

looking at the osquery code for how these are determined and populated in osquery's database, I see they are doing it differently between platforms so it would be ideal if I could specify computer_name for linux, and maybe local_hostname for macos, etc.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants