What would cause the error;

No event control (blocking) filter found in config

when the

plgx_event_filters

are set in the

osquery.conf

file

this is not error.. just a message when blocking feature config (set under

plgx_event_control

) is not present in conf file

you are correct its not, I run with verbose when testing configs to watch all the things. Without it I do not see the message

great