Facebook open sources project that lets you view your OS as a relational database

8 Comments

On Wednesday, Facebook said it is open sourcing a software framework called osquery that lets users see their operating system as a relational database, supposedly making it easier for them to learn how their OS is functioning.

Using osquery, common operating system characteristics like running processes, drivers and open network connections can be viewed as SQL tables, which allows users to run SQL queries on them to discover potential problems and troubleshoot errors.

You can even use osquery as a security tool to help discover malicious activity lurking about in your OS. For example, you can run a custom SQL query that displays all of the running processes on your OS that originally launched from a binary that doesn’t exist on your OS filesystem — a common trait of shady processes.

The social networking giant also created some handy tools (also part of the open-source release) based from the osquery framework that can help users learn about their OS performance. The osqueryi query console works as an SQL interface for users to experiment with queries and the host-monitoring daemon osqueryd lets folks schedule those queries.

From the [company]Facebook[/company] blog:

The osquery codebase is comprised of many different software components and public APIs that users can play around with to make their own tools and applications. It’s also supposedly cross platform so both Linux and Mac OS users should be satisfied.

Facebook said that it let a couple of companies give osquery a test ride and has so far received good reactions.

8 Comments

none

What’s so good about it, Windows Management Instrumentation (WMI), has been doing it since Windows 95 days.

Fernando Olmos

Wow… Big Data to the masses! But will Apple allow iOS users to do the same though?

deminthon

By being completely clueless about what this article is talking about, apparently. I guess Fernando saw the word “database” and completely misunderstood the subject matter.

Fernando Olmos

Quote, “Osquery exposes an operating system as a high-performance relational database.”.
I don’t know what industries you’ve worked in, but a RDBMS *IS* a database.

Fernando Olmos

From Wikipedia…
“Big data is difficult to work with using most relational database management systems and desktop statistics and visualization packages, requiring instead “massively parallel software running on tens, hundreds, or even thousands of servers”.[11] What is considered “big data” varies depending on the capabilities of the organization managing the set, and on the capabilities of the applications that are traditionally used to process and analyze the data set in its domain.”

So you’re telling me managing datasets from an operating system is Mickey Mouse? A simple SQL SELECT should tell you everything about that OS, including native primer code on how the Kernel works, etc? You’re telling me querying an OS system is like an RDBMS flat file system that can be viewed even on Notepad?

Hmmm ok. I didn’t realise it was going to be that simple. But ok. You’re the “experts”!

Comments are closed.