diff --git a/articles/enroll-hosts.md b/articles/enroll-hosts.md index 31b6d832ae7e..a6962de0886e 100644 --- a/articles/enroll-hosts.md +++ b/articles/enroll-hosts.md @@ -331,9 +331,17 @@ Fleetd will send stdout/stderr logs to the following directories: - Linux: Orbit and osqueryd stdout/stderr output is sent to syslog (`/var/log/syslog` on Debian systems, `/var/log/messages` on CentOS, and `journalctl -u orbit` on Fedora). If the `logger_path` agent configuration is set to `filesystem`, fleetd will send osquery's "result" and "status" logs to the following directories: - - Windows: C:\Program Files\Orbit\osquery_log - - macOS: /opt/orbit/osquery_log - - Linux: /opt/orbit/osquery_log + - Windows: `C:\Program Files\Orbit\osquery_log` + - macOS: `/opt/orbit/osquery_log` + - Linux: `/opt/orbit/osquery_log` + +The Fleet Desktop log files can be found in the following directories depending on the platform: + + - Linux: `$XDG_STATE_HOME/Fleet or $HOME/.local/state/Fleet` + - macOS: `$HOME/Library/Logs/Fleet` + - Windows: `%LocalAppData%/Fleet` + +The log file name is `fleet-desktop.log`. ### Using system keystore for enroll secret