mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
e452cc6a8a
- Add endpoints for osquery to register and continue a carve. - Implement client functionality for retrieving carve details and contents in fleetctl. - Add documentation on using file carving with Fleet. Addresses kolide/fleet#1714
30 lines
779 B
Text
30 lines
779 B
Text
--force=true
|
|
--host_identifier=hostname
|
|
--verbose=true
|
|
--debug
|
|
--tls_dump=true
|
|
|
|
--tls_server_certs=/etc/osquery/kolide.crt
|
|
|
|
--enroll_secret_env=ENROLL_SECRET
|
|
--enroll_tls_endpoint=/api/v1/osquery/enroll
|
|
|
|
--config_plugin=tls
|
|
--config_tls_endpoint=/api/v1/osquery/config
|
|
--config_refresh=10
|
|
|
|
--disable_distributed=false
|
|
--distributed_plugin=tls
|
|
--distributed_interval=10
|
|
--distributed_tls_max_attempts=3
|
|
--distributed_tls_read_endpoint=/api/v1/osquery/distributed/read
|
|
--distributed_tls_write_endpoint=/api/v1/osquery/distributed/write
|
|
|
|
--logger_plugin=tls
|
|
--logger_tls_endpoint=/api/v1/osquery/log
|
|
--logger_tls_period=10
|
|
|
|
--disable_carver=false
|
|
--carver_start_endpoint=/api/v1/osquery/carve/begin
|
|
--carver_continue_endpoint=/api/v1/osquery/carve/block
|
|
--carver_block_size=2000000
|