https://github.com/osquery/osquery logo
Title
m

Mike S.

03/24/2023, 9:37 PM
Hi team - Is there any known issue with the firefox_plugins table? I am running the query SELECT * FROM firefox_addons; on a system where it has worked previously, and it's coming back with zero results, despite verifying there are addons on the system.
k

Kathy Satterlee

03/27/2023, 4:59 PM
Hi again @Mike S.! That's one of the tricky tables that returns results for the user that's running the query. Since `osqueryd`'s user doesn't have any Firefox add-ons, there's nothing to be return. Joining with the
users
table should do the trick:
SELECT * FROM users CROSS JOIN firefox_addons USING (uid)
(All of that assuming that you're running the query through Fleet)
m

Mike S.

03/27/2023, 5:01 PM
And there they are! I guess that's how I was pulling them previously but totally spaced on it. Thanks @Kathy Satterlee!
k

Kathy Satterlee

03/27/2023, 5:04 PM
Sweet!