Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#fleet
Title
e
Esteban
02/11/2021, 3:31 PM
Hello. I've installed osquery on one my host, i'm seeing tracking from the host to fleet host but fleet is not enrolling it. Any way to debug it?
I'm seeing incoming traffic with tcpdump but no logs or enrollment of the host
z
zwass
02/11/2021, 4:29 PM
Check out
https://github.com/fleetdm/fleet/blob/master/docs/2-Deployment/FAQ.md#why-arent-my-osquery-agents-connecting-to-fleet
e
Esteban
02/11/2021, 4:58 PM
I build my clients with kolide launcher, can i set those osquery flags on build?
z
zwass
02/11/2021, 5:00 PM
Ah, I'm not sure. Maybe there's a verbose or debug flag?
e
Esteban
02/12/2021, 1:52 PM
Yeah, i can set up those flags with kolide launcher. But how i debug it? Seeing fleet logs?
I didn't mentioned it but i have no access to the prod machine that is not enrolling
z
zwass
02/12/2021, 4:52 PM
Typically debugging enrollment requires access to the host since we can't get the logs into Fleet until the host successfully enrolls
5 Views
Post