also anyone have experience getting logs from fleet to sumol osquery #kolide

also, anyone have experience getting logs from fle...

laudecay

11/26/2019, 12:22 AM

also, anyone have experience getting logs from fleet to sumologic?

sundsta

11/26/2019, 12:49 AM

Yes. We do Fleet -> GCP PubSub -> Sumo. PubSub can automatically send them to a Sumo HTTPS endpoint, so no polling necessary

laudecay

11/26/2019, 2:52 AM

oh i'm full AWS tho

laudecay

11/26/2019, 2:53 AM

im currently thinking firehose to s3, then s3 to sumo

laudecay

11/26/2019, 2:53 AM

oh wait aws pubsub can go to https endpoint yay

3 Views