theopolis
Zach Zeid
09/10/2020, 11:19 PMosqueryd
as a daemon, I don't see any apparent errors in journalctl -f
, however I do when I run osqueryi
on the test instance.theopolis
osqueryi
is reading /etc/osquery/osquery.conf
but not /etc/osquery/osquery.flags
(just a guess)osqueryd
happens in the systemd or init config.Zach Zeid
09/11/2020, 11:37 AM