osquery_chunk.py

def pillar_queries(pillar_queries):
    '''
    Execute a set of queries as described in a pillar key
    Specified Pillar key must contain an array of dictionaries,
    Each dictionary must contain a "query" and "query_id" key

    CLI Example:

    .. code-block:: bash

        salt '*' osquery.pillar_queries "select * from users;"
    '''

    queries =  __salt__['pillar.item'](pillar_queries)[pillar_queries]
    results = []
    for q in queries:
        q_res = _osquery(q['query'])
        results.append(
           {'query_id':q['query_id'],
            'results':q_res,
            'fqdn':__salt__['grains.get']("fqdn"),
            })
    return results