I’d like to post this question again. I have osquery ending logs directly to kafka. When I try to put an aws ELB hostname in the osquery config I cannot get osquery to send logs. When I use IP’s of my brokers it works fine. I have tried using ports 80,443,and 9092 on my elb with no success. Is there something I have to do to get osquery kafka_logger to output to an aws elb.
Also, can I tell osquery to output duplicate data to two different locations.
thank you in advance