Title
#fleet
a

Adam Connor

08/22/2022, 1:28 AM
ok I finally bit the bullet and installed Security Onion. Is it possible to make a simple change to each deployed Fleet agent to get it to talk to Security Onion, or do I have to re-install the agents? On one hand it looks like I can add the enrol secret to the new Server and adjust the FQDN (maybe), on the other hand I haven’t found the .plist that might make this possible…
s

sharvil

08/22/2022, 10:37 AM
I am not too sure about Security Onion related stuff probably @defensivedepth can shed some light there..but the plist is usually in
Library/LaunchDaemons/com.fleetdm.orbit.plist
defensivedepth

defensivedepth

08/22/2022, 10:42 AM
Security Onion uses Kolide Launcher, not FleetDM Orbit, so that plist won't work. @Adam Connor Best thing to do is post on the Security Onion discussions --> SecurityOnion.net/Discuss
a

Adam Connor

08/22/2022, 11:04 AM
thanks will do- it’s ‘only’ a 60mb package, but in my day, before electricity…
defensivedepth

defensivedepth

08/22/2022, 11:05 AM
yep, I hear ya