Loqpa
04/01/2019, 10:06 AMsyslog
table not being populated. I followed steps in issue #1964 and i can see logger
output in cat
.
My version is 3.3.2 (from apt get)
Here is the snippet:zwass
Loqpa
04/02/2019, 7:19 AMrsyslogd
is able to write to the pipe (i saw logger output in another shell with cat)
What would you recommend to try next?zwass
cat
in another shell? Another osquery process?ycpr
04/11/2019, 10:33 AMosqueyi
and rsyslogd
are listening to the pipe but select * from syslog_events
returns nothing. If I cat the pipe its' output is not empty though.Loqpa
04/11/2019, 3:13 PMzwass