fairly sure I m doing something stupid but have fleet setup

Question

fairly sure I m doing something stupid but have fleet setup and a client enrolled but distributed queries don t seem to be working Fleet shows the client as enrolled and I see results going into tmp osquery results from the host When I run a dist query the host receives it executes it and says it s posting it back to the server but nothing happens in the results window ``` I0419 19 39 36 237423 71012352 distributed cpp 119 Executing distributed query kolide distributed query 1 SELECT FROM users I0419 19 39 36 286029 71012352 distributed cpp 119 Executing distributed query kolide distributed query 2 SELECT FROM users I0419 19 39 36 328785 71012352 distributed cpp 119 Executing distributed query kolide distributed query 3 SELECT FROM osquery info I0419 19 39 36 334825 71012352 distributed cpp 119 Executing distributed query kolide distributed query 4 SELECT FROM osquery info I0419 19 39 36 336787 71012352 distributed cpp 119 Executing distributed query kolide distributed query 5 SELECT FROM osquery info I0419 19 39 36 346189 71012352 tls cpp 240 TLS HTTPS POST request to URI I0419 19 39 43 415841 68354048 tls cpp 240 TLS HTTPS POST request to URI I0419 19 39 53 478049 71012352 tls cpp 240 TLS HTTPS POST request to URI I0419 19 39 53 492719 68354048 tls cpp 240 TLS HTTPS POST request to URI I0419 19 40 03 635547 68354048 tls cpp 240 TLS HTTPS POST request to URI I0419 19 40 13 613971 71012352 tls cpp 240 TLS HTTPS POST request to URI I0419 19 40 13 692886 68354048 tls cpp 240 TLS HTTPS POST request to URI I0419 19 40 23 818622 68354048 tls cpp 240 TLS HTTPS POST request to URI I0419 19 40 33 946880 68354048 tls cpp 240 TLS HTTPS POST request to URI I0419 19 40 39 743857 71012352 tls cpp 240 TLS HTTPS POST request to URI I0419 19 40 40 005892 71012352 distributed cpp 119 Executing distributed query kolide distributed query 1 SELECT FROM users I0419 19 40 40 051160 71012352 distributed cpp 119 Executing distributed query kolide distributed query 2 SELECT FROM users I0419 19 40 40 094993 71012352 distributed cpp 119 Executing distributed query kolide distributed query 3 SELECT FROM osquery info I0419 19 40 40 096632 71012352 distributed cpp 119 Executing distributed query kolide distributed query 4 SELECT FROM osquery info I0419 19 40 40 097954 71012352 distributed cpp 119 Executing distributed query kolide distributed query 5 SELECT FROM osquery info I0419 19 40 40 104478 71012352 tls cpp 240 TLS HTTPS POST request to URI ```

austinylin · Answer

flags file ``` enroll secret env=OSQUERY ENROLL SECRET tls hostname=fleet redacted host identifier=uuid enroll tls endpoint= api v1 osquery enroll config refresh=3600 disable distributed=false distributed plugin=tls distributed interval=10 distributed tls max attempts=3 distributed tls read endpoint= api v1 osquery distributed read distributed tls write endpoint= api v1 osquery distributed write logger plugin=tls logger tls endpoint= api v1 osquery log logger tls period=10 ```

groob · Answer

Is redis rubbing ok

groob · Answer

Running

Eduardo · Answer

Is there a way to check healthz times out and I don t see anything in the logs

groob · Answer

if it times out that s disturbing

groob · Answer

if it s returning 500 then you have an issue with either redis or mysql

groob · Answer

logs would show which

Eduardo · Answer

would it have something to do with redis in cluster mode

Eduardo · Answer

Eduardo · Answer

Figured it out Indeed a redis issue thanks for the help slightly smiling face