From a99d9d4c9b340b3c7be6f170a680dc181316b8fe Mon Sep 17 00:00:00 2001
From: Chris Long <clong@cl0ng.com>
Date: Sun, 17 Dec 2017 15:59:02 -0800
Subject: [PATCH] Adding SQL to enable snapshot event splitting in Fleet

---
 README.md            | 1 +
 Vagrant/bootstrap.sh | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/README.md b/README.md
index abdee94..9d60ad7 100644
--- a/README.md
+++ b/README.md
@@ -19,6 +19,7 @@ NOTE: This lab has not been hardened in any way and runs with default vagrant cr
 
 ## Requirements
 * 55GB+ of free disk space
+* 16GB+ of RAM
 * Packer 1.0.0 or newer
 * Vagrant 1.9.2 or newer
 * Virtualbox or VMWare Fusion/Workstation
diff --git a/Vagrant/bootstrap.sh b/Vagrant/bootstrap.sh
index d84c9b3..75dbd23 100644
--- a/Vagrant/bootstrap.sh
+++ b/Vagrant/bootstrap.sh
@@ -61,6 +61,8 @@ sed -i 's/ -it//g' demo.sh
 ./demo.sh up simple
 # Set the enrollment secret to match what we deploy to Windows hosts
 docker run --rm --network=kolidequickstart_default mysql:5.7 mysql -h mysql -u kolide --password=kolide -e 'update app_configs set osquery_enroll_secret = "enrollmentsecret" where id=1;' --batch kolide
+# Set snapshot events to be split into multiple events
+docker run --rm --network=kolidequickstart_default mysql:5.7 mysql -h mysql -u kolide --password=kolide -e 'insert into options (name, type, value) values ("logger_snapshot_event_type", 2, "true");' --batch kolide
 echo "Updated enrollment secret"
 cd /home/vagrant