https://github.com/osquery/osquery logo
#general
Title
# general
f

Federico Talentino

01/27/2022, 6:56 PM
Hi everyone! Can someone help me please? I am doing some tests with Osquery on Windows 10 with some queries I tried to write by myself. These queries work alone when I use them with osqueryi, and also if I put them in the osquery.conf file in "schedule" section and the run osqueryd. The problem appears when I try to put in the schedule section more than one of them, like for example 10 queries. In this case when i run the daemon I cannot see any log in the results. If someone can help me, thanks a lot.
k

koo

01/27/2022, 7:05 PM
Hey @Federico Talentino are the schedule keys unique?
f

Federico Talentino

01/27/2022, 8:22 PM
Hi @koo ! Yes, the schedule keys are already different 😞
d

Dhruv Rathod

02/07/2022, 12:00 PM
try running
osqueryd --verbose
, you might get some clues there
k

koo

02/07/2022, 2:40 PM
Great point @Dhruv Rathod
🙂 1
4 Views