05 Jun 2024 05:35 PM
Is it possible to use DQL to list out the OS services that are setup for specific hosts and their details? Much like how you can use the settings object API with schema ID 'builtin:os-services-monitoring' to see the service rule you setup, whether its enabled or not, the detection condition, etc, I'm wondering if you can display this same info in DQL. The reason behind this is to display the services being monitored, on a dashboard and be able to see their state of enabled or disabled.
Solved! Go to Solution.
05 Jun 2024 08:34 PM
The dt.osservice.availability metric is available on Grail, so you can use it in a Dashboard.
You can use a DQL or a simple metric tile
05 Jun 2024 11:24 PM
Thank you! This does help. In addition to this though, do you know if the configuration settings of the service is available via dql? I would prefer to use dql to get things like OS services and their configuration instead of looping through getting host IDs then grabbing any os service objects associated with the host. So pretty much the same things you can get via the API I'd like to get through DQL if possible.