search

CrowdStrike / falcon-scripts

Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor
The Unlicense
142 stars 83 forks source link

Linux install script fix for when multiple tags applied #178

Closed TomRyan-321 closed 1 year ago

TomRyan-321 commented 1 year ago

Remove quotes on cs_falcon_args and disable shellcheck alert as otherwise no tags apply.

With quotes around "${cs_falcon_args}"

+ /opt/CrowdStrike/falconctl -s -f '--cid=<CIDRemoved> --tags=test1,test2,test3/tag'`

When verifying:

/opt/CrowdStrike/falconctl -g --tags
Sensor grouping tags are not set.

After change: 

+ /opt/CrowdStrike/falconctl -s -f --cid=<CIDRemoved> --tags=test1,test2,test3/tag

Verifying:

/opt/CrowdStrike/falconctl -g --tags
tags=test1,test2,test3/tag.