https://github.com/osquery/osquery logo
Title
g

grant seltzer

10/12/2020, 4:18 PM
Quick question, If I have a custom logger plugin set in my flags file, and config plugin set to TLS (pointed at fleet), Do I need to set some other configuration elsewhere to make my osqueryd hosts use the logger plugin? The way I have it, it's not, using a snapshot file (/var/log/osquery/osqueryd.snapshots.log) instead
z

zwass

10/12/2020, 4:44 PM
Is logging plugin also being set in the config returned via TLS?
g

grant seltzer

10/12/2020, 4:45 PM
That i'm not sure, how would I check that?
ah
fleetctl get options
does say TLS logger plugin
I take it i'll need to use fleetctl to set a new config for that
Feels kinda hidden to me, it'd be nice to have that in the fleet UI
z

zwass

10/12/2020, 4:48 PM
Yeah, you have that right. I would like to expose that configuration more in the UI.
g

grant seltzer

10/12/2020, 4:48 PM
Gotcha, thanks so much for the help!
z

zwass

10/12/2020, 4:48 PM
Yep, good luck!