https://github.com/osquery/osquery logo
#fleet
Title
# fleet
a

Arsenio

01/18/2023, 9:50 PM
Hello! so reading this blog post and we are streaming events through firehose to s3 buckets, set up like your dogfood terraform. The environment variables FLEET_OSQUERY_STATUS_LOG_PLUGIN and FLEET_OSQUERY_RESULT_LOG_PLUGIN are used for the fleet server or for the osquery agents themselves? I just want to make sure my understanding is correct. Going to start testing the evented tables and I don't want to duplicate logging
k

Kathy Satterlee

01/18/2023, 10:41 PM
Those are the Fleet server settings. On your agents, the flags are:
Copy code
--logger_plugin=tls 
 --logger_tls_endpoint=/api/v1/osquery/log 
 --logger_tls_period=10
3 Views