Fleet producing 500 Error

[anelshaer]

What version of fleet are you using (fleet version --full)?

v3.1.0

What operating system are you using?

CentOS

What did you do?

Deployed V3.1.0 for testing. after 2 days of working fine. i added KOLIDE_LOGGING_DEBUG and after i deployed fleet i got 500 error and still.

What did you expect to see?

i was expecting to get more logging. my objective was to enable access logging and if there is logging around running any osquery logs.

What did you see instead?

Uh oh! Error 500

{"component":"service","err":"list hosts: missing destination name primary_ip in *[]*kolide.Host","method":"ListHosts","took":"577.005µs","ts":"2020-09-02T11:19:04.701414231Z"}
{"component":"service","err":"selecting labels: missing destination name label_membership_type in *[]*kolide.Label","method":"ListLabels","took":"445.206µs","ts":"2020-09-02T11:19:04.702462612Z"}
{"component":"service","err":"getting enroll secret: selecting app config: missing destination name additional_queries in *kolide.AppConfig","ip_addr":"10.10.10.141:54638","method":"EnrollAgent","took":"786.318µs","ts":"2020-09-02T11:20:37.334139037Z","x_for_ip_addr":""}

[zwass]

It looks like you may have unintentionally redeployed the older version of Fleet here? That's what these missing destination name errors suggest to me.

[anelshaer]

i'm not getting the 500 error now after redeploying. but i not seeing any kind of logs for different resources being accessed. or admin modification, query ran. does fleet have this kind of logs or it should be created as a feature request??.
thanks a lot Zwass.

[zwass]

Glad it worked for you!

Yes, those logs go to the Fleet server's stderr.

[anelshaer]

Is there a way we can get those logs to monitor who access fleet and who run any query or do admin changes??

…

On Fri 25. Sep 2020 at 7:14 PM, Zachary Wasserman ***@***.***> wrote: Closed #2295 <#2295>. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#2295 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA7F5JNPXVSFTRKPXG5MDKLSHTFZDANCNFSM4QS4PK4Q> .

[zwass]

Yes, those logs go to stderr.