osquery

« previous next »

Print

Pages: [1]

Author Topic: osquery (Read 6433 times)

badchipmunk

Newbie
Posts: 3
Karma: 0

osquery

« on: March 23, 2019, 01:51:38 am »

Hi! Not sure where to put this, so the dev branch seemed appropriate. How can I request that osquery be included in the ports library for opnsense? It's available on FreeBSD ports, and it's quite handy to monitor my systems, so I'd love to see it included here so I can query my opnsense host along with the rest of my fleet.

Logged

gstuartj

Newbie
Posts: 17
Karma: 1

Re: osquery

« Reply #1 on: April 17, 2019, 12:52:50 am »

This would be great. OSQuery is only going to get more popular. While I'm not sure if it should be included in core, it would be a very valuable plugin to have.

Logged

mimugmail

Hero Member
Posts: 6767
Karma: 494

Re: osquery

« Reply #2 on: April 17, 2019, 06:56:29 am »

Via GitHub in tools repo, open an issue for this

Logged

WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

franco

Administrator
Hero Member
Posts: 17670
Karma: 1612

Re: osquery

« Reply #3 on: April 20, 2019, 07:34:57 pm »

The dependencies don't look so appealing for lightweight footprint of our build system, but I'll take a closer look. For reference:

https://github.com/opnsense/tools/issues/131

Logged

franco

Administrator
Hero Member
Posts: 17670
Karma: 1612

Re: osquery

« Reply #4 on: April 21, 2019, 07:38:41 pm »

osquery requires 749 MB of packages on the disk and 71 MB in zipped downloads. it is indeed very heavy for the purpose it's trying to fill in. not sure what Michael thinks but it certainly does not qualify our policy "light footprint and no similar alternative available".

Thoughts on this situation?

Cheers,
Franco

Logged

Print

Pages: [1]

« previous next »