Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Powered by
Title
a
asparamancer
11/26/2020, 12:42 AM
should osquery be sending results from different queries in one request to the /logger endpoint on TLS? If so, is there a flag to stop this behaviour?
z
zwass
11/26/2020, 12:44 AM
Yes. The results are batched up and sent together.
I suppose you could set
--logger_tls_max_lines
to 1 to get this, but then you'd likely be accumulating logs faster than they were flushing. I don't think it would work well.
What are you trying to achieve?
a
asparamancer
12/16/2020, 12:31 PM
only just saw this, it was an issue with our endpoint parsing things strangely
4 Views
#macos
Join Slack