sttor
02/17/2020, 11:17 AMseph
sttor
02/17/2020, 5:07 PMseph
sttor
02/18/2020, 4:13 AMseph
--disable_events=false
?sttor
02/19/2020, 2:12 AMseph
osquery_
tables often can provide some insight to how events are workingsttor
02/19/2020, 2:16 AMseph
sttor
02/19/2020, 2:24 AMcat /var/osquery/syslog_pipe
zwass
cat
you will not receive it in osquerysttor
02/19/2020, 2:25 AMzwass
sttor
02/19/2020, 2:26 AMzwass
sttor
02/19/2020, 2:29 AMsyslog hang issue