https://github.com/osquery/osquery logo
#general
Title
# general
t

theopolis

09/10/2020, 10:21 PM
Can you be more specific? “The config/flags work with no errors?”
z

Zach Zeid

09/10/2020, 11:19 PM
when running
osqueryd
as a daemon, I don't see any apparent errors in
journalctl -f
, however I do when I run
osqueryi
on the test instance.
t

theopolis

09/11/2020, 2:34 AM
This might be because
osqueryi
is reading
/etc/osquery/osquery.conf
but not
/etc/osquery/osquery.flags
(just a guess)
This is my guess because the usage of the flagfile with
osqueryd
happens in the systemd or init config.
z

Zach Zeid

09/11/2020, 11:37 AM
This makes sense, thank you.