Also tried ubuntu with the same error Thanks

Question

alessandrogario · Answer

This seems like a problem with the extension itself

alessandrogario · Answer

see if it can be started directly with the same path

seph · Answer

Yeah Sounds like the extension is exiting and osquery respawns it Try running it manually

hubert dulay · Answer

no errors when i run manually

hubert dulay · Answer

I was able to get this ext to work <https github com osquery osquery python blob master examples many plugins ext>

hubert dulay · Answer

i think it might be a permissions issue with installing mods with pip

hubert dulay · Answer

found the error i had to `chmod +x pulsar ext`

seph · Answer

That makes sense so how were you running it manually that it worked

hubert dulay · Answer

i called with python

hubert dulay · Answer

`python pulsar ext`

seph · Answer

Yeah That is fairly different

hubert dulay · Answer

i also need to `ln s python3 python` because osqueryd was looking for python

seph · Answer

I don t think osquery looks for python `pulsar ext` looks for python and that s controlled by the first line of that script

hubert dulay · Answer

ah makes sense now thanks all

alessandrogario · Answer

Yeah I think you could replace it with ` usr bin env python3`

hubert dulay · Answer

Thanks for the help <https www decodable co blog routing osquery events via apache pulsar|https www decodable co blog routing osquery events via apache pulsar>

seph · Answer

FWIW `OSQuery` is just `osquery` or if capitalized `Osquery`

seph · Answer

No comments about the code but I heart seeing osquery blog posts Y all do awesome things