OPNsense Forum

Archive => 19.7 Legacy Series => Topic started by: badchipmunk on March 23, 2019, 01:51:38 am

Title: osquery
Post by: badchipmunk on March 23, 2019, 01:51:38 am
Hi! Not sure where to put this, so the dev branch seemed appropriate. How can I request that osquery be included in the ports library for opnsense? It's available on FreeBSD ports, and it's quite handy to monitor my systems, so I'd love to see it included here so I can query my opnsense host along with the rest of my fleet.
Title: Re: osquery
Post by: gstuartj on April 17, 2019, 12:52:50 am
This would be great. OSQuery is only going to get more popular. While I'm not sure if it should be included in core, it would be a very valuable plugin to have.
Title: Re: osquery
Post by: mimugmail on April 17, 2019, 06:56:29 am
Via GitHub in tools repo, open an issue for this :)
Title: Re: osquery
Post by: franco on April 20, 2019, 07:34:57 pm
The dependencies don't look so appealing for lightweight footprint of our build system, but I'll take a closer look. For reference:

https://github.com/opnsense/tools/issues/131
Title: Re: osquery
Post by: franco on April 21, 2019, 07:38:41 pm
osquery requires 749 MB of packages on the disk and 71 MB in zipped downloads. it is indeed very heavy for the purpose it's trying to fill in. not sure what Michael thinks but it certainly does not qualify our policy "light footprint and no similar alternative available".

Thoughts on this situation?


Cheers,
Franco