https://github.com/osquery/osquery logo
Title
b

Brett Demetris

07/31/2020, 10:51 PM
hey, new to fleet. anyone have a working aws deployment going I could bounce some issues off of? I haven't been able to get launcher working, but native plugin works for enrollment and shipping logs, but I cant query any results back from the GUI. any ideas?
s

sundsta

08/01/2020, 12:05 AM
Launcher defaults to gRPC. If your proxy/LB in AWS doesn’t support gRPC it won’t work unless you specifically tell launcher to use TLS instead
b

Brett Demetris

08/01/2020, 12:18 AM
yea I played with ELB/ALB both, launcher itself seems ok with
jsonrpc
but it gets back some decoding errors from fleet
hence my move to native tls - which seems fine for the most part, I just cant query any data back that is being sent 😕
s

sundsta

08/01/2020, 12:54 AM
If you're referring to the live query in the web ui, you have to set up redis otherwise that won't work (fleet will log errors about not being able to connect to redis)
b

Brett Demetris

08/01/2020, 1:29 AM
I have redis setup with no visible errors. Must be something else I am missing
t

terracatta

08/01/2020, 11:03 PM
Fleet does not support the JSONRPC protocol embedded in Launcher. It only support's Launcher in GRPC mode. Fleet also works with just standard osquery via TLS.
The JSONRPC mode is used only for the Kolide SaaS product