From 27d1a6e3e7b1ae6eb75ed4a2f699c9a02bdab88d Mon Sep 17 00:00:00 2001 From: Aleksandr Maus Date: Mon, 6 Dec 2021 09:19:27 -0500 Subject: [PATCH] Osquerybeat: Add missing osquery top-level configuration properties for auto_table_construction, yara, prometheus_targets (#29270) --- x-pack/osquerybeat/internal/config/osquery.go | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/x-pack/osquerybeat/internal/config/osquery.go b/x-pack/osquerybeat/internal/config/osquery.go index 6db2ac0ca134..3bc100672c65 100644 --- a/x-pack/osquerybeat/internal/config/osquery.go +++ b/x-pack/osquerybeat/internal/config/osquery.go @@ -59,12 +59,15 @@ type Events struct { } type OsqueryConfig struct { - Options map[string]interface{} `config:"options" json:"options,omitempty"` - Schedule map[string]Query `config:"schedule" json:"schedule,omitempty"` - Packs map[string]Pack `config:"packs" json:"packs,omitempty"` - Filepaths map[string][]string `config:"file_paths" json:"file_paths,omitempty"` - Views map[string]string `config:"views" json:"views,omitempty"` - Events *Events `config:"events" json:"events,omitempty"` + Options map[string]interface{} `config:"options" json:"options,omitempty"` + Schedule map[string]Query `config:"schedule" json:"schedule,omitempty"` + Packs map[string]Pack `config:"packs" json:"packs,omitempty"` + Filepaths map[string][]string `config:"file_paths" json:"file_paths,omitempty"` + Views map[string]string `config:"views" json:"views,omitempty"` + Events *Events `config:"events" json:"events,omitempty"` + Yara map[string]interface{} `config:"yara" json:"yara,omitempty"` + PrometheusTargets map[string]interface{} `config:"prometheus_targets" json:"prometheus_targets,omitempty"` + AutoTableConstruction map[string]interface{} `config:"auto_table_construction" json:"auto_table_construction,omitempty"` } func (c OsqueryConfig) Render() ([]byte, error) {