openstack/openstack-ansible-ops
Code Issues Proposed changes

fix osquery filesystem logging

Browse Source 
This fixes the issue where osquery does not log locally; making
  the elk_metrics_6x integration possible.

Change-Id: Ice506018757dee5ee02ef7fa0593ce06aae9c515
This commit is contained in:
Victor Palma 2018-10-23 00:36:25 -05:00
parent fd2005baf4
commit 0046e1d240
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
osquery/vars/variables.yml
View File

@ -10,7 +10,7 @@ osquery_flags:
- "--tls_hostname={{ hostvars[groups['kolide-fleet_all'][0]]['ansible_host'] }}:443" - "--tls_hostname={{ hostvars[groups['kolide-fleet_all'][0]]['ansible_host'] }}:443"
- "--host_identifier=hostname" - "--host_identifier=hostname"
- "--enroll_tls_endpoint=/api/v1/osquery/enroll" - "--enroll_tls_endpoint=/api/v1/osquery/enroll"
- "--config_plugin=tls" - "--config_plugin=filesystem,tls"
- "--config_tls_endpoint=/api/v1/osquery/config" - "--config_tls_endpoint=/api/v1/osquery/config"
- "--config_tls_refresh=10" - "--config_tls_refresh=10"
- "--disable_distributed=false" - "--disable_distributed=false"