• l

    lightblue

    2 years ago
    hi, I'm writing a custom logger plugin on a windows server that logs to one of my rest services, running "select value from osquery_extensions;" from osqueryi gives "\.\pipe\shell.em", running the same query from osqueryd schedule gives "\.\pipe\osquery.em", when my plugin runs, it hangs on connecting to the named pipe, I wonder how I can fix it.
  • s

    seph

    2 years ago
    On windows, names pipes are in their own pseudo file systems. The pipe part denotes that. You can't find it on the filesystem directly.
  • Usually osquery would start the extension, and pass it the name/path of the pipe as an argument.