{"id":15509547,"url":"https://github.com/gibbs/puppet-osquery","last_synced_at":"2025-04-23T02:33:24.407Z","repository":{"id":43117103,"uuid":"470244863","full_name":"gibbs/puppet-osquery","owner":"gibbs","description":"Puppet osquery module","archived":false,"fork":false,"pushed_at":"2025-04-19T16:55:32.000Z","size":49,"stargazers_count":4,"open_issues_count":2,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-19T19:47:10.005Z","etag":null,"topics":["osquery","puppet-module"],"latest_commit_sha":null,"homepage":"","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/gibbs.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2022-03-15T16:33:07.000Z","updated_at":"2024-11-28T18:46:31.000Z","dependencies_parsed_at":"2024-01-26T18:39:37.834Z","dependency_job_id":null,"html_url":"https://github.com/gibbs/puppet-osquery","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gibbs%2Fpuppet-osquery","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gibbs%2Fpuppet-osquery/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gibbs%2Fpuppet-osquery/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gibbs%2Fpuppet-osquery/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/gibbs","download_url":"https://codeload.github.com/gibbs/puppet-osquery/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250357942,"owners_count":21417380,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["osquery","puppet-module"],"created_at":"2024-10-02T09:43:11.431Z","updated_at":"2025-04-23T02:33:24.389Z","avatar_url":"https://github.com/gibbs.png","language":"Ruby","readme":"# osquery\n\n[![Build Status](https://github.com/gibbs/puppet-osquery/workflows/CI/badge.svg)](https://github.com/gibbs/puppet-osquery/actions?query=workflow%3ACI)\n[![Release](https://github.com/gibbs/puppet-osquery/workflows/Release/badge.svg)](https://github.com/gibbs/puppet-osquery/actions?query=workflow%3ARelease)\n[![Puppet Forge](https://img.shields.io/puppetforge/v/genv/osquery.svg?maxAge=2592000?style=plastic)](https://forge.puppet.com/genv/osquery)\n[![Apache-2 License](https://img.shields.io/github/license/gibbs/puppet-osquery.svg)](LICENSE)\n\nInstall, configure and manage osquery.\n\n## Usage\n\nInclude the `osquery` class to install the package and run `osqueryd` with\nminimal configuration.\n\n```puppet\ninclude osquery\n```\n\n## Configuration\n\nThe `settings` parameter accepts any hash that is saved as JSON to\n`/etc/osquery/osquery.conf`.\n\n```puppet\nclass { 'osquery':\n  settings =\u003e {\n    options   =\u003e {\n      config_plugin   =\u003e 'filesystem',\n      disable_logging =\u003e 'false',\n      logger_plugin   =\u003e 'syslog',\n    },\n    discovery =\u003e [\n      'SELECT pid FROM processes WHERE name = \\'foobar\\';',\n      'SELECT 1 FROM users WHERE username like \\'www%\\';',\n    ],\n  }\n}\n```\n\n```yaml\nosquery::settings:\n  options:\n    config_plugin: filesystem\n    logger_plugin: syslog\n    host_identifier: uuid\n  schedule:\n    foobar:\n      query: SELECT foo, bar, pid FROM foobar_table;\n      interval: 600\n  packs:\n    shard: 10\n    external_pack: /path/to/external_pack.conf\n    queries:\n      suid_bins:\n        query: SELECT * FROM suid_bins;\n        interval: 3600\n```\n\n## Dependencies\n\nThe following modules are soft dependencies that are required\ndepending on the OS family used.\n\n### Debian Family\n\n- `puppetlabs/apt` \u003e= 9.1.0\n\n### RedHat Family\n\n- `puppetlabs/yumrepo_core` \u003e= 1.2.0\n\n### Windows Family\n\n- `puppetlabs/chocolatey` \u003e= 8.0.0\n\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgibbs%2Fpuppet-osquery","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgibbs%2Fpuppet-osquery","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgibbs%2Fpuppet-osquery/lists"}