@groob yes , iam using fleet,the full command like this : osqueryd --verbose --ephemeral --disable_database \ --disable_events false \ --disable_audit false \ --disable_logging false \ --config_path=/etc/osquery/osquery.conf \ --tls_hostname 192.168.56.2:8080 \ --tls_server_certs /tpsys/soft/192.168.56.2_8080.pem \ --host_identifier osquery \ --config_plugin tls \ --config_tls_endpoint /api/v1/osquery/config \ --logger_tls_endpoint /api/v1/osquery/log \ --logger_plugin tls \ --enroll_tls_endpoint /api/v1/osquery/enroll \ --enroll_secret_path /tpsys/soft/192.168.56.2_8080.txt