Apologies if this has been asked before - is there a way to control the client disk usage for osquery with Kolide? after the agent is deployed, can I set a size to start rolling over logs?

Are you looking to do this on the host or the fleet server?

all hosts in the fleet

Osquery doesn’t do log rotation, so you have to configure something else to do it. If you use the ‘tls’ logger plugin, Fleet can do log rotation on the server (see https://github.com/kolide/fleet/blob/master/docs/infrastructure/configuring-the-fleet-binary.md#filesystem_enable_log_rotation).

awesome, thank you so much!