Hello! so reading this <blog post> and we are stre...
# fleet
a
Hello! so reading this blog post and we are streaming events through firehose to s3 buckets, set up like your dogfood terraform. The environment variables FLEET_OSQUERY_STATUS_LOG_PLUGIN and FLEET_OSQUERY_RESULT_LOG_PLUGIN are used for the fleet server or for the osquery agents themselves? I just want to make sure my understanding is correct. Going to start testing the evented tables and I don't want to duplicate logging
k
Those are the Fleet server settings. On your agents, the flags are:
Copy code
--logger_plugin=tls 
 --logger_tls_endpoint=/api/v1/osquery/log 
 --logger_tls_period=10