MarkMurdock
07/05/2021, 6:26 PMagent_options:
config:
decorators:
load:
- SELECT uuid AS host_uuid FROM system_info;
- SELECT hostname AS hostname FROM system_info;
options:
config_tls_max_attempts: 10
disable_distributed: false
distributed_interval: 10
distributed_plugin: tls
distributed_tls_max_attempts: 10
host_identifier: hostname
logger_plugin: tls
logger_tls_endpoint: /api/v1/osquery/log
logger_tls_period: 10
pack_delimiter: /
overrides:
platforms:
windows:
options:
enable_powershell_events_subscriber: true
enable_windows_events_publisher: true
enable_windows_events_subscriber: true
Rachel Perkins
07/05/2021, 7:16 PM--verbose --tls_dump
and look at whether Fleet is returning the appropriate configuration?MarkMurdock
07/06/2021, 6:11 PM