manikant singh
10/03/2020, 7:16 AMseph
manikant singh
10/03/2020, 3:04 PMapiVersion: v1
kind: option
spec:
config:
decorators:
load:
- SELECT uuid AS host_uuid FROM system_info;
- SELECT hostname AS hostname FROM system_info;
file_paths:
homes:
- /home/%%
etc:
- /etc/%%
file_accesses:
- home
- etc
osquery:
result_log_file:
- /var/log/osquery/result.log
options:
disable_distributed: false
distributed_interval: 10
distributed_plugin: tls
distributed_tls_max_attempts: 3
logger_plugin: tls
logger_tls_endpoint: /api/v1/osquery/log
logger_tls_period: 10
pack_delimiter: /
overrides: {}
osquery:
result_log_file: /var/log/osquery/result.log
zwass
manikant singh
10/05/2020, 8:07 AMzwass
fleet config_dump
command along with any flags you'd provide to fleet serve
to check that you get the expected configuration.