https://github.com/osquery/osquery logo
#kolide
Title
# kolide
m

Matt K

12/05/2019, 8:03 PM
I'm trying to switch over logging in Fleet from
filesystem
to
pubsub
, and I've switched the configs, made the topics, etc. I have the
GOOGLE_APPLICATION_CREDENTIALS
env var set to the filepath of my service account, but I keep getting
Error initializing service: initializing osquery logging: create pubsub status logger: create pubsub client: pubsub: google: could not find default credentials
... has anyone run into this before?
Solved this by adding
Environment="<$vals>"
to
fleet.service
systemd config.
And now Splunk is collecting all the Fleet logs, this is so nice. Thanks Kolide!
👍 1
3 Views