fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.15k stars 432 forks source link

Scope scheduled queries with labels #16413

Open pintomi1989 opened 9 months ago

pintomi1989 commented 9 months ago

Goal

User story
As a user adding/editing a query,
I want my scheduled query to target hosts based on labels
so that I can target a more specific set of hosts.

Context

Changes

Product

Engineering

ℹ️  Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

QA

Risk assessment

Manual testing steps

  1. Step 1
  2. Step 2
  3. Step 3

Testing notes

Confirmation

  1. [ ] Engineer (@____): Added comment to user story confirming successful completion of QA.
  2. [ ] QA (@____): Added comment to user story confirming successful completion of QA.
noahtalerman commented 8 months ago

@rachaelshaw we decided we want to purge the query report if a query's platforms, labels, or minimum osquery version change, right? (each option changes the targets)

I updated this dev note to reflect this:

Screenshot 2024-03-01 at 10 00 10 AM

noahtalerman commented 8 months ago

@rachaelshaw heads up, I added this sentence to the dev note here to clarify the behavior when there are no matching hosts:

Screenshot 2024-03-01 at 10 02 46 AM

(Mike brought this up during "Product design check-in call"

rachaelshaw commented 8 months ago

@rachaelshaw we decided we want to purge the query report if a query's platforms, labels, or minimum osquery version change, right? (each option changes the targets)

@noahtalerman yes; handling platforms/min version change is filed as a bug here: https://github.com/fleetdm/fleet/issues/17018

sharon-fdm commented 8 months ago

Estimation: BE:5 FE:3

noahtalerman commented 5 months ago

Hey @rachaelshaw curious on why this is coming back to feature fest. Did a customer bring this up recently? Or, is it because we have some pretty much ready-to-go designs?

rachaelshaw commented 5 months ago

@noahtalerman just brought it back because we already had it designed/estimated (not aware of any customer requests other than those tagged on the issue)