Loqpa
syslog
table not being populated. I followed steps in issue #1964 and i can see logger
output in cat
.
My version is 3.3.2 (from apt get)
Here is the snippet:zwass
Loqpa
rsyslogd
is able to write to the pipe (i saw logger output in another shell with cat)
What would you recommend to try next?zwass
cat
in another shell? Another osquery process?ycpr
osqueyi
and rsyslogd
are listening to the pipe but select * from syslog_events
returns nothing. If I cat the pipe its' output is not empty though.Loqpa