https://github.com/osquery/osquery logo
Title
m

Moonlight

08/29/2018, 2:12 PM
I'm using tls logger and I receive a lot of logs with "log_type": "status" in its JSON (with one scheduled query, each 5 seconds I receive one message) . I have tried to avoid sent status logs with --logger_min_status=10 or --logger_min_status=1 as @theopolis said in several messages. I have enrollment disabled. I want to receive results and snapshot logs only. I don't know how to disable status logs only. Any idea?
m

Mustafa

08/29/2018, 2:19 PM
please try logger_min_status=3 a friend had mentioned a few day ago
m

Moonlight

08/29/2018, 3:00 PM
no luck
it doesn't works
f

fmanco

08/29/2018, 10:50 PM
@gguli has some patches for the logger waiting to be merged. Maybe they fix this. George?
g

gguli

08/31/2018, 10:23 AM
@Mustafa @Moonlight @fmanco Thats right #5090 should fix it