{% extends 'base.html' %} {% load inventory_extras %} {% load ui_extras %} {% block content %}

{{ object.name }}

Pack

{% if perms.osquery.change_pack %} {% url 'osquery:update_pack' object.id as url %} {% button 'UPDATE' url "Edit Pack" %} {% endif %} {% if perms.osquery.delete_pack %} {% url 'osquery:delete_pack' object.id as url %} {% button 'DELETE' url "Delete Pack" %} {% endif %}
Attribute Value
Name {{ object.name }}
Slug {{ object.slug }}
Description {{ object.description|default:"-"|linebreaksbr }}
Discovery quer{{ object.discovery_queries|length|pluralize:"y,ies" }} {% if object.discovery_queries %}
{{ object.discovery_queries|join:"
" }}
{% else %}-{% endif %}
Shard {% if object.shard %}{{ object.shard }}%{% else %}-{% endif %}
Event routing key {{ object.event_routing_key|default:"-" }}
{% created_updated_at object %}
{% if perms.osquery.view_configuration %}

Used in {{ configuration_pack_count }} configuration{{ configuration_pack_count|pluralize }}

{% if configuration_pack_count %}
{% for configuration_pack in configuration_packs %} {% endfor %}
Name Tags
{{ configuration_pack.configuration }} {% for tag in configuration_pack.tags.all %} {% inventory_tag tag %} {% empty %} - {% endfor %}
{% endif %}
{% endif %} {% if perms.osquery.view_packquery %}

Scheduled quer{{ pack_query_count|pluralize:"y,ies" }} ({{ pack_query_count }})

{% if can_add_pack_query %} {% url 'osquery:add_pack_query' object.pk as url %} {% button 'CREATE' url "Create new Scheduled Query" %} {% endif %}
{% for pack_query in pack_queries %} {% with pack_query.query as query %}

{{ query }}

{% if perms.osquery.change_packquery %} {% url 'osquery:update_pack_query' object.pk pack_query.pk as url %} {% button 'UPDATE' url "Edit Scheduled Query" %} {% endif %} {% if perms.osquery.delete_packquery %} {% url 'osquery:delete_pack_query' object.pk pack_query.pk as url %} {% button 'DELETE' url "Delete Scheduled Query" %} {% endif %}
Query
Name
{{ query }}
SQL
{{ query.get_sql_html|safe }}
{% if query.platforms %}
Platform{{ query.platforms|length|pluralize }}
{{ query.platforms|join:", " }}
{% endif %} {% if query.minimum_osquery_version %}
Min. osquery ver.
{{ query.minimum_osquery_version }}
{% endif %} {% if query.description %}
Description
{{ query.description|default:"-" }}
{% endif %} {% if query.value %}
Value
{{ query.value }}
{% endif %} {% if query.compliance_check %}
Compliance check
yes {% endif %}
Interval {{ pack_query.interval }}s
Log removed actions? {{ pack_query.log_removed_actions|yesno }}
Snapshot mode? {{ pack_query.snapshot_mode|yesno }}
Shard {% if pack_query.shard %}{{ pack_query.shard }}%{% else %}-{% endif %}
Can be denylisted? {{ pack_query.can_be_denylisted|yesno }}
{% endwith %} {% endfor %} {% endif %}
{% endblock %}