https://github.com/osquery/osquery logo
Title
e

Esteban

02/11/2021, 3:31 PM
Hello. I've installed osquery on one my host, i'm seeing tracking from the host to fleet host but fleet is not enrolling it. Any way to debug it?
I'm seeing incoming traffic with tcpdump but no logs or enrollment of the host
e

Esteban

02/11/2021, 4:58 PM
I build my clients with kolide launcher, can i set those osquery flags on build?
z

zwass

02/11/2021, 5:00 PM
Ah, I'm not sure. Maybe there's a verbose or debug flag?
e

Esteban

02/12/2021, 1:52 PM
Yeah, i can set up those flags with kolide launcher. But how i debug it? Seeing fleet logs?
I didn't mentioned it but i have no access to the prod machine that is not enrolling
z

zwass

02/12/2021, 4:52 PM
Typically debugging enrollment requires access to the host since we can't get the logs into Fleet until the host successfully enrolls