With Fleet SaaS, are all the <log destinations> av...
# fleet
p
With Fleet SaaS, are all the log destinations available? Is the Activities API the same data as what's in the audit logs? Are there APIs that give the same info that is sent if you enable OSQuery status logging and result logging?
k
You could configure osquery not to forward the logs to Fleet and use any of the osquery logging options, but you'll miss out on query caching and some statistics in Fleet. https://osquery.readthedocs.io/en/stable/deployment/logging/
What are the concerns about those logging destinations?
p
Can on-premise servers ship data to Amazon Data Firehose? I thought it required the infrastructure to exist in AWS?
u
hey @Phillip Boushy (osquery) - we have >50% of our customers who self-host and still ship logs to their preferred destination via firehose. it does not require AWS infra for your Fleet instance. if you run into any issues or want to chat with our team about this, please let me know!