jacknagz
03/05/2020, 4:25 PMzwass
jacknagz
03/09/2020, 5:00 PMzwass
jacknagz
03/09/2020, 5:10 PMzwass
--tls_dump
to verify that osquery is sending data over to the Fleet instance? Are you able to see responses to those log requests? Are there errors in the Fleet logs?jacknagz
03/11/2020, 11:21 PMzwass
jacknagz
03/11/2020, 11:25 PMzwass
jacknagz
03/12/2020, 6:31 PMfirehose
in my options.yml
? for result logs? https://github.com/kolide/fleet/blob/master/server/logging/logging.go#L62zwass
jacknagz
03/12/2020, 8:06 PMoptions
I specify with fleetctl vs the ENV variables I set on the containerapiVersion: v1
kind: options
spec:
config:
decorators:
load:
- SELECT uuid AS host_uuid FROM system_info;
- SELECT hostname AS hostname FROM system_info;
options:
disable_distributed: false
distributed_interval: 10
distributed_plugin: tls
distributed_tls_max_attempts: 3
logger_plugin: tls
logger_tls_endpoint: /api/v1/osquery/log
logger_tls_period: 10
pack_delimiter: /
overrides: {}
osquery:
status_log_plugin: firehose
zwass