R0n
11/14/2018, 7:31 PM/etc/log/
instead of /tmp
RPuth
11/14/2018, 7:40 PMosquery:
status_log_file: /var/log/osquery/status.log
result_log_file: /var/log/osquery/result.log
enable_log_rotation: true
R0n
11/14/2018, 7:46 PMmarpaia
11/15/2018, 12:49 AMfleet serve
you should be able to override them