https://github.com/osquery/osquery logo
m

Mystery Incorporated

06/24/2021, 7:29 AM
Does osquery either report to fleet OR write to a local log or can it do both?
p

Prateek Kumar Nischal

06/24/2021, 1:27 PM
I know that
Copy code
--logger_plugin=filesystem,syslog
writes to /var/log/osquery/ as well as syslog explicitly.. you can try with
Copy code
--logger_plugin=filesystem,tls
that may work although I am not very sure as I have not tried it personally
m

Mystery Incorporated

06/24/2021, 3:09 PM
@Prateek Kumar Nischal thanks 🙂
7 Views