package kolide.agent

Get desktop application:
View/edit binary Protocol Buffers messages

• rpc RequestEnrollment (EnrollmentRequest, EnrollmentResponse)

  launcher.proto:14

  Attempt to enroll a host with kolide/cloud

  message EnrollmentRequest

  launcher.proto:61

  • string enroll_secret = 1

  • string host_identifier = 2

  • optional EnrollmentDetails enrollment_details = 3

  message EnrollmentResponse

  launcher.proto:82

  • string node_key = 1

  • bool node_invalid = 2

  • string error_code = 3

  • bool disable_device = 4

• rpc RequestConfig (AgentApiRequest, ConfigResponse)

  launcher.proto:18

  request an updated configuration from kolide/cloud a generic request object is sent

  message ConfigResponse

  launcher.proto:97

  kolide/cloud will be generating well-structured json already, so forward it along instead of de/re/de-serializing it as a protobuf too this might make sense to convert to full proto later

  • string config_json_blob = 1

  • bool node_invalid = 2

  • string error_code = 3

  • bool disable_device = 4

• rpc RequestQueries (AgentApiRequest, QueryCollection)

  launcher.proto:22

  request/pull Dist queries from kolide/cloud a generic request object is sent

  message QueryCollection

  launcher.proto:134

  a query collection contains many queries

  • repeated QueryCollection.Query queries = 1

  • bool node_invalid = 2

  • string error_code = 3

  • bool disable_device = 4

• rpc PublishLogs (LogCollection, AgentApiResponse)

  launcher.proto:26

  publish logs from osqueryd to kolide/cloud a generic response object is returned

  message LogCollection

  launcher.proto:109

  • string node_key = 1

  • LogCollection.LogType log_type = 2

  • repeated LogCollection.Log logs = 3

  • string error_code = 4

• rpc PublishResults (ResultCollection, AgentApiResponse)

  launcher.proto:30

  publish results from Dist queries to kolide/cloud a generic response object is returned

  message ResultCollection

  launcher.proto:152

  a result collection contains many results

  • string node_key = 1

  • repeated ResultCollection.Result results = 2

  • string error_code = 3

• rpc CheckHealth (AgentApiRequest, HealthCheckResponse)

  launcher.proto:36

  check the health of the GRPC server a value indicating healthiness is returned if you don't hear from this endpoint assume the worst

  message HealthCheckResponse

  launcher.proto:180

  • HealthCheckResponse.ServingStatus status = 1

Used as request type in: Api.CheckHealth, Api.RequestConfig, Api.RequestQueries

• string node_key = 1

Used as response type in: Api.PublishLogs, Api.PublishResults

• string message = 1

• string error_code = 2

• bool node_invalid = 3

• bool disable_device = 4

Used in: EnrollmentRequest

• string os_version = 1

• string os_build = 2

• string os_platform = 3

• string hostname = 4

• string hardware_vendor = 5

• string hardware_model = 6

• string hardware_serial = 7

• string osquery_version = 8

• string launcher_version = 9

• string os_name = 10

• string os_platform_like = 11

• string hardware_uuid = 12

Used in: HealthCheckResponse

• UNKNOWN = 0

• SERVING = 1

• NOT_SERVING = 2

Used in: LogCollection

• string data = 1

AGENT is added as a new log type, for adding new logging capabilities from kolide/agent

Used in: LogCollection

• RESULT = 0

• STATUS = 1

• AGENT = 2

Used in: QueryCollection

• string id = 1

• string query = 2

status is moved here instead of appearing as a map of id[status] on the ResultCollection, as it does in the osq docs

Used in: ResultCollection

• string id = 1

• repeated Result.ResultRow rows = 2

• int32 status = 3

Used in: Result

• repeated ResultRow.Column columns = 1

Used in: ResultRow

• string name = 1

• string value = 2