3 ms·
"I hit up my little dataset of everything running on any machine in production" People actually have comprehensive overviews of what they're running on their l
by isoprophlex 5y ago
"I hit up my little dataset of everything running on any machine in production"
People actually have comprehensive overviews of what they're running on their landscape?!
- theblazehen 5y agoCould be running something like https://osquery.io/ https://osquery.io/
- philsnow 5y agoIf you can manage to tame it, auditd will give you a much more comprehensive look at what has happened on your machines. osquery is more like polling (on a long interval because it's heavyweight) but auditd is processing events from the kernel.
- cranekam 5y agoYes, at this company there was a very neat dataset of, essentially, the output of `ps` on every host taken every N minutes. Metadata about each process also included things like binary build time, commit, open ports, UID/GID, etc. It made things like tracking software rollouts or finding hosts that (for whatever reason) were stuck running old code very easy.
- isoprophlex 5y agoBrilliant in its simplicity, thanks for sharing!