Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

I'm trying to switch over logging in Fleet from `filesystem` to `pubsub`, and I've switched the configs, made the topics, etc. I have the `GOOGLE_APPLICATION_CREDENTIALS` env var set to the filepath of my service account, but I keep getting `Error initializing service: initializing osquery logging: create pubsub status logger: create pubsub client: pubsub: google: could not find default credentials` ... has anyone run into this before?

*Solved* this by adding `Environment="&lt;$vals&gt;"` to `fleet.service` systemd config.

And now Splunk is collecting all the Fleet logs, this is so nice. Thanks Kolide!