Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support the vmodule command line flag #25487

Open
Patagonia121 opened this issue Jan 16, 2025 · 4 comments
Open

Support the vmodule command line flag #25487

Patagonia121 opened this issue Jan 16, 2025 · 4 comments
Labels
~customer request A prioritized, customer feature request. Has ≥ 1 customer codename label(s) customer-figali

Comments

@Patagonia121
Copy link
Member

Patagonia121 commented Jan 16, 2025

  • customer-figali Slack thread: https://fleetdm.slack.com/archives/C06GSN6HR6D/p1736987491691839
  • @noahtalerman: User requested this because they want to enable verbose logging for specific osquery errors so that they can limit the amount of noise while debugging osquery issues. Today, when they try to add this flag in the UI (Organization settings > Agent options), they see an error that says "this flag isn't supported"
    • @noahtalerman: In the interim the user can force apply the agent options with the fleetctl apply -f agent-options.yml --force. This will bypass Fleet's validation.
    • @noahtalerman: Eventually Fleet could add vmodule as a supported flag.

User stories

@Patagonia121 Patagonia121 added :product Product Design department (shows up on 🦢 Drafting board) customer-figali labels Jan 16, 2025
@Patagonia121 Patagonia121 changed the title Support the key "vmodule" across all osquery versions to enable more verbose logging for certain osquery errors and modules in a more targeted away vs. turning on --verbose globally Support the key "vmodule" across all osquery versions to enable more verbose logging for certain osquery errors and modules in a more targeted way vs. turning on --verbose globally Jan 16, 2025
@Patagonia121
Copy link
Member Author

@noahtalerman the customer feels this is a minor change/addition to the product and doesn't want to wait a month to go through this on a call, so I'm bringing forward now and have included the Slack thread where the discussion originated from. Thanks!

@noahtalerman
Copy link
Member

Hey @sharon-fdm can you please help us confirm that the --vmodule command line flag works on the latest osquery version?

Fleet errors if you try to set this in Agent options today. See the customer Slack thread for more info here: https://fleetdm.slack.com/archives/C06GSN6HR6D/p1736987491691839

@noahtalerman noahtalerman self-assigned this Jan 27, 2025
@noahtalerman noahtalerman changed the title Support the key "vmodule" across all osquery versions to enable more verbose logging for certain osquery errors and modules in a more targeted way vs. turning on --verbose globally Support the vmodule command line flag Jan 27, 2025
@noahtalerman noahtalerman added ~feature fest Will be reviewed at next Feature Fest and removed :product Product Design department (shows up on 🦢 Drafting board) labels Jan 27, 2025
@noahtalerman noahtalerman removed their assignment Jan 27, 2025
@sharon-fdm
Copy link
Collaborator

@noahtalerman, we have some BW to take this into our board if you'd like. It shouldn't be a big thing.

@dantecatalfamo dantecatalfamo self-assigned this Jan 27, 2025
@noahtalerman noahtalerman added ~customer request A prioritized, customer feature request. Has ≥ 1 customer codename label(s) and removed ~feature fest Will be reviewed at next Feature Fest labels Jan 28, 2025
@noahtalerman
Copy link
Member

@Patagonia121 heads up, we peeled a user story (#25838) off of this request and prioritized it (brought it onto the drafting board).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
~customer request A prioritized, customer feature request. Has ≥ 1 customer codename label(s) customer-figali
Projects
None yet
Development

No branches or pull requests

4 participants