it seems like watchdog events never make it to the TLS logger; anyone have a similar experience? i can’t seem to see why they would fail to be pushed upstream, when other errors are
f
FG
10/11/2019, 4:20 PM
what log level are they considered? maybe their type is below your threshold to push?
t
timb
10/11/2019, 4:46 PM
they’re at warning level; i’m getting info osquery status logs, so i should definitely be seeing them i think 😞
this is super frustrating because they do make it to syslog, but not always a valid option for me