LoginSign Up
← Back to all sparks
O

osquery

INFRA · APIS
Velocity0.0

SQL-powered endpoint instrumentation and monitoring agent

osquery.io ↗

osquery's only tracked entry is a build toolchain update.

endpoint-visibilityopen-sourcebuild-toolinglinux
◆Current state
The single entry in osquery's feed is 5.22.0's move to osquery-toolchain 1.2.0, which upgrades LLVM and zlib and lists the Ubuntu and CentOS builds it was tested on. It does not describe any new tables or query features.
◆Where it's heading
With one entry there is no trend to read. The test matrix, which still includes Ubuntu 16.04 and CentOS 6, shows osquery keeps supporting very old Linux hosts.
◆Prediction
Unclear from a single build-tooling entry; nothing here signals the next feature release.

◆Recent moves

  1. 8mo ago

    5.22.0: Update osquery-toolchain to 1.2.0 (LLVM 11.0.0, zlib 1.2.13) (#8773)

    A toolchain update for building osquery, moving LLVM and zlib forward and testing across old and new Linux releases. It matters to packagers, not to people writing queries.

    View source ↗