hi im using fleet 3 5 1 and i have 3 fleet servers and for s

Question

hi im using fleet 3 5 1 and i have 3 fleet servers and for some reason my load balancer gives the queries only to the two first servers and i looked at yaml file of the fleet service that doesn t get queries and he is the same like the other fleet service that getting queries and when I use fleetctl the third fleet works do you have any solution

Lucas Rodriguez · Answer

Hi < jimmy> Fleet is unaware of how it get requests or if there are other Fleet instances running as part of the deployment So this is most likely a configuration network issue between the load balancer and the hosts running your Fleet instances Here s a guide on how to deploy Fleet with a section on deploying a load balancer

Lucas Rodriguez · Answer

If possible we advise users to upgrade to Fleet s latest version `4 14 0` there have been several performance improvements since `3 5 1`

Lucas Rodriguez · Answer

gt and when I use fleetctl the third fleet works do you have any solution 1 `fleetctl` gt 3rd Fleet Server 2 `fleetctl` gt load balancer gt 3rd Fleet Server If you are doing 1 then I d suggest you try with 2 to test that the request is really going through the load balancer

jimmy · Answer

hi < Lucas Rodriguez> the section of the load balancer is only with kubectl and my server doesn t have kubernetes and its `fleetctl` gt 3rd Fleet Server

jimmy · Answer

< Lucas Rodriguez> If you are doing 1 then I d suggest you try with 2 to test that the request is really going through the load balancer how can i check this

jimmy · Answer

< Lucas Rodriguez> and thanks for the help slightly smiling face

Lucas Rodriguez · Answer

gt how can i check this So if I understood correctly your devices will connect to Fleet through the load balancer via some defined URL Have `fleetctl` use the same URL as the osquery hosts To be sure that you are connecting to Fleet the same way as your devices

jimmy · Answer

< Lucas Rodriguez> I don t think that the fleetctl go threw the load balancer

jimmy · Answer

< Lucas Rodriguez> but how can i check this to be sure

Lucas Rodriguez · Answer

`fleetctl config get address` will return the URL it s using to connect to Fleet Such URL should match the one your devices use to connect to Fleet E g in my development setup ```$ fleetctl config get address default address = gt <https localhost 8080>```

Lucas Rodriguez · Answer

gt but how can i check this to be sure A way to check this would be to run the third Fleet server in debug mode `FLEET LOGGING DEBUG` var or ` logging debug` cli argument and see if it s getting any requests Fleet logs one line per request when ` logging debug` is set

Lucas Rodriguez · Answer

Oh same question was asked here slightly smiling face <https osquery slack com archives C01DXJL16D8 p1652726641378669>

jimmy · Answer

< Lucas Rodriguez> thanks for the help fleetctl config get address i did this command and my server gave me wrong ip of the load balancer

jimmy · Answer

< Lucas Rodriguez> so what should i do now

Lucas Rodriguez · Answer

You can configure `fleetctl` address with `fleetctl config set address https $LOAD BALANCER IP $LOAD BALANCER PORT`

jimmy · Answer

i did this but sadly it still doesn t get queries from the load balancer

jimmy · Answer

should i maybe restart the load balancer after that

Lucas Rodriguez · Answer

gt i did this but sadly it still doesn t get queries from the load balancer What do you mean by this

Lucas Rodriguez · Answer

gt `fleetctl config set address https $LOAD BALANCER IP $LOAD BALANCER PORT` This command is only configuring `fleetctl` to connect to Fleet via the load balancer

jimmy · Answer

hi im using fleet 3 5 1 and i have 3 fleet servers and for some reason my load balancer gives the queries only to the two first servers and i looked at yaml file of the fleet service that doesn t get queries and he is the same like the other fleet service that getting queries and when I use fleetctl the third fleet works do you have any solution I mean that I still have that problem

Lucas Rodriguez · Answer

OK we are just trying to connect via `fleetctl` via the load balancer to be able to troubleshoot

Lucas Rodriguez · Answer

<https osquery slack com archives C01DXJL16D8 p1652729790761829 thread ts=1652726641 378669 amp cid=C01DXJL16D8> this should also help troubleshooting Basically have your load balancer use Fleet s healthz endpoint