12/20/2019, 12:45 AM
huh, that's interesting, as I didn't know that watchdog can't use the logger plugin. I don't know if my use case matches @timb but I really want all of osquery's logging to be kind of managed in the same way. So if I'm using the kinesis plugin, I want status / results logs to be sent by kinesis, be sent in json format, and add decorators. I wrote up hopefully some of that intention into https://github.com/osquery/osquery/issues/6141


12/21/2019, 1:08 AM
I very much understand what you are trying to achieve. But to be clear having watchdog logs available for the logger plugins and having decorators on status logs are two distinct features. These sound reasonable and we can talk through implementation in the issues. But let's keep them distinct because there are unique complexities to both.