Ojas
04/11/2022, 10:22 AMTomas Touceda
04/11/2022, 11:28 AMLucas Rodriguez
04/12/2022, 9:55 AMOjas
04/13/2022, 3:59 AMTomas Touceda
04/13/2022, 12:37 PM--logger_min_status=2
so that you don't see those warningsOjas
05/13/2022, 6:45 AMLucas Rodriguez
05/13/2022, 2:11 PMI dont see good docs for what all options we can utilise in global agent optionsWe use the following docs: https://osquery.readthedocs.io/en/stable/installation/cli-flags/. Some options require osquery restart to take effect. E.g. one I found out today is
disable_tables
, such option can be set in Fleet's Global Agent options, but requires a osquery restart to take effect.--verbose
? (--logger_min_status
is ignored if that's the case)
3. Is --logger_min_status
flag being set when launching osqueryd in the host?
Regarding the duplication of the Failed enrollment request to
in WARNING
and INFO
log maybe worth asking on the #general channel?Ojas
05/16/2022, 4:46 PMLucas Rodriguez
05/16/2022, 4:46 PMOjas
05/16/2022, 4:46 PMLucas Rodriguez
05/16/2022, 6:21 PMBut at times what happen is when i set a flag in global agents on refresh all other settings are gone and just the new flag remains. weird@Ojas The issue was fixed in Fleet
v4.11.0
(#4470).Ojas
05/17/2022, 5:14 AMLucas Rodriguez
05/17/2022, 11:53 AMconfig:
options:
logger_plugin: tls
disable_tables: curl
pack_delimiter: /
logger_tls_period: 10
distributed_plugin: tls
disable_distributed: false
logger_tls_endpoint: /api/osquery/log
distributed_interval: 10
distributed_tls_max_attempts: 3
decorators:
load:
- SELECT uuid AS host_uuid FROM system_info;
- SELECT hostname AS hostname FROM system_info;
overrides: {}
(Assuming you lost them due to the update bug.)