Hey all, can i run this by someone.
Using fleetctl i've the following config:
apiVersion: v1
kind: options
spec:
config:
decorators:
load:
- SELECT uuid AS host_uuid FROM system_info;
- SELECT hostname AS hostname FROM system_info;
options:
config_plugin: tls
config_refresh: 300
disable_distributed: false
distributed_interval: 330
distributed_plugin: tls
distributed_tls_max_attempts: 3
distributed_tls_read_endpoint: /api/v1/osquery/distributed/read
distributed_tls_write_endpoint: /api/v1/osquery/distributed/write
logger_plugin: tls
logger_tls_endpoint: /api/v1/osquery/log
logger_tls_period: 10
pack_delimiter: /
overrides: {}
The client flags file is as follows:
--host_identifier=uuid
--utc
--tls_hostname=someURL
--tls_server_certs=/private/var/osquery/certs/certs.pem
--enroll_secret_path=/private/var/osquery/enrolldev_secret.txt
--enroll_tls_endpoint=/api/v1/osquery/enroll
--config_plugin=tls
--config_tls_refresh=300
--config_tls_endpoint=/api/v1/osquery/config
--distributed_plugin=tls
--distributed_tls_read_endpoint=/api/v1/osquery/distributed/read
--distributed_tls_write_endpoint=/api/v1/osquery/distributed/write
--distributed_interval=330
--disable_distributed=false
--logger_plugin=tls
--logger_tls_endpoint=/api/v1/osquery/log
--logger_tls_period=10
--tls_dump
--verbose