Title
#kolide
Matt K

Matt K

12/05/2019, 8:03 PM
I'm trying to switch over logging in Fleet from
filesystem
to
pubsub
, and I've switched the configs, made the topics, etc. I have the
GOOGLE_APPLICATION_CREDENTIALS
env var set to the filepath of my service account, but I keep getting
Error initializing service: initializing osquery logging: create pubsub status logger: create pubsub client: pubsub: google: could not find default credentials
... has anyone run into this before?
8:22 PM
Solved this by adding
Environment="<$vals>"
to
fleet.service
systemd config.
8:40 PM
And now Splunk is collecting all the Fleet logs, this is so nice. Thanks Kolide!
👍 1