From 660796bf728879b72ecb342e475643fd860ea261 Mon Sep 17 00:00:00 2001 From: Lucas Manuel Rodriguez Date: Wed, 3 Nov 2021 14:35:17 -0300 Subject: [PATCH] Add documentation for running live queries with GET request (#2755) --- tools/api/README.md | 3 +++ tools/api/fleet/queries/run | 15 +++++++++++++++ 2 files changed, 18 insertions(+) create mode 100755 tools/api/fleet/queries/run diff --git a/tools/api/README.md b/tools/api/README.md index a0f61a8947..d714795226 100644 --- a/tools/api/README.md +++ b/tools/api/README.md @@ -64,4 +64,7 @@ export FLEET_ENV_PATH=/Users/victor/fleet_env # get scheduled queries in a pack ./tools/api/fleet/packs/scheduled 2 | jq '.scheduled[]|{"name": .name, "schedule_id": .id, "query_id": .query_id}' + +# run a live queries on hosts (queries with id=1 and id=2 on hosts with id=3 and id=4) +./tools/api/fleet/queries/run "[1,2]" "[3,4]" ``` diff --git a/tools/api/fleet/queries/run b/tools/api/fleet/queries/run new file mode 100755 index 0000000000..0c998f19e2 --- /dev/null +++ b/tools/api/fleet/queries/run @@ -0,0 +1,15 @@ +#!/bin/bash +source $FLEET_ENV_PATH +endpoint="api/v1/fleet/queries/run" +echo "By default, $endpoint will take 90 seconds..." +jq -n \ + --argjson query_ids "$1" \ + --argjson host_ids "$2" \ + '.query_ids = $query_ids + |.host_ids = $host_ids + '|\ + curl $CURL_FLAGS --request GET \ + --max-time 100 \ + --header "Content-Type: application/json" \ + -H "Authorization: Bearer $TOKEN" \ + "$SERVER_URL/$endpoint" -d@-