Enable verbose level logging and Core Dump Creation in OSQuery Sensor

Enable verbose level logging and Core Dump Creation in OSQuery Sensor

To Collect additional Verbose level logs and Enable TLS level Core dump and OSsquery Dump, below flags should be set in osquery.flags  file. 
This configuration should be used only during Debug and Troubleshooting session, once its completed, these flags should be deleted from the file 

--verbose_level=4
--tls_dump=true
--verbose
--enable_core_dumps = true
--auto_flags_update=false


--tls_dump` can be used with `--verbose`. This flag will print all of the HTTPS body content (usually JSON data) to `stderr`.

    • Related Articles

    • OSquery enrollment issues - Fresh installation

      Below are a few guidelines to troubleshoot osquery communication issues.  Upon osquery fresh installation if you are not seeing the  asset online in uptycs portal, please follow below steps.  1)Asset Group Access: Check the asset group of the ...