1.8.0
New features in 1.8.0:
This is a release rollup of fixes since 1.7.4.
There is an optional Thrift API change for extensions: the shutdown
method.
The osquery core, extension manager, will attempt to call this optionally-implemented method
immediately before it shuts down. This request is blocking and allows an extension to perform
cleanup before its watcher thread quits.
Plugin API changes
#2224 Add shutdown()
method to extensions API
#2229 The logger facilities now write catastrophic errors to syslog
#2241 Distributed queries will log verbose events indicating their query requests
Bug fixes:
#2205 Fix milli/micro conversion when waiting for active plugins (regression from 1.7.4)
#2207 Restore extension respawn limits to 20s (regression from 1.7.4)
#2217 Fix SQLite local access after ASIO URL usage (OS X)
#2228 Force RocksDB to sync writes for non-event domains
#2234 Fix various Linux process path parsing errors
Config options / CLI flags changes
--decorations_top_level
Add decorators as top level JSON objects