Quick question, If I have a custom logger plugin set in my flags file, and config plugin set to TLS (pointed at fleet), Do I need to set some other configuration elsewhere to make my osqueryd hosts use the logger plugin? The way I have it, it's not, using a snapshot file (/var/log/osquery/osqueryd.snapshots.log) instead
10/12/2020, 4:44 PM
Is logging plugin also being set in the config returned via TLS?
10/12/2020, 4:45 PM
That i'm not sure, how would I check that?
fleetctl get options
does say TLS logger plugin
I take it i'll need to use fleetctl to set a new config for that
Feels kinda hidden to me, it'd be nice to have that in the fleet UI
10/12/2020, 4:48 PM
Yeah, you have that right. I would like to expose that configuration more in the UI.