Gavin
03/22/2022, 3:01 PMosquery:
status_log_plugin: firehose
where as at a minimum you would have to include the relevant API spec which is not on that page.
---
apiVersion: v1
kind: config
spec:
osquery:
status_log_plugin: firehose
Which gives
fleetctl apply -f firehose.yml
applying fleet config: PATCH /api/v1/fleet/config received status 400 Bad request: json: unknown field "osquery"
zwass
03/22/2022, 6:14 PMKathy Satterlee
03/22/2022, 6:14 PMGavin
03/22/2022, 6:17 PMConfig file format:
should be labelled as helm chart configuration options with probably a mention that there is a helm chart.
I also personally found finding this section a bit difficult https://fleetdm.com/docs/using-fleet/configuration-fileskoo
03/22/2022, 7:41 PM