You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The code to enroll new clients automatically makes the UUID uppercase. In certain environments, for example docker, the UUID is extracted and submitted as lowercase, so the function getNodeByUUID can not find the node when trying to update the metadata or log status/result logs. This is the error seen in the logs:
osquery-ubuntu18 | I0710 17:30:03.995153 26 tls.cpp:253] TLS/HTTPS POST request to URI: https://osctrl-nginx/dev/log
osctrl-nginx | 172.25.0.3 - - [10/Jul/2020:17:30:04 +0000] "POST /dev/log HTTP/1.1" 200 22 "-" "osquery/4.4.0" "-"
osctrl-tls | dispatch.go:15: error updating metadata getNodeByUUID record not found
osctrl-tls | dispatch.go:31: error refreshing last result getNodeByUUID record not found
Proposed solution
Every time the UUID is looked up it will be uppercase'd so consistency will be achieved and this will not affect metadata updates or logging ability.
The text was updated successfully, but these errors were encountered:
Overview
The code to enroll new clients automatically makes the
UUID
uppercase. In certain environments, for example docker, theUUID
is extracted and submitted as lowercase, so the functiongetNodeByUUID
can not find the node when trying to update the metadata or log status/result logs. This is the error seen in the logs:Proposed solution
Every time the
UUID
is looked up it will be uppercase'd so consistency will be achieved and this will not affect metadata updates or logging ability.The text was updated successfully, but these errors were encountered: