Still facing problem to activate the journal for NTFS networ

Question

Still facing problem to activate the journal for NTFS network drive Any lead will be appreciable

Jason · Answer

Did you enable the osquery flags

Nand · Answer

Sorry may be I missing any flag Can you please guid

Jason · Answer

Sure

Jason · Answer

Jason · Answer

The FleetDM folks put that one together that explains how to turn on the features needed for the various evented tables in osquery

Jason · Answer

and the file monitoring table is one of those tables

Nand · Answer

Hi Jason Thanks for your prompt response I m new to osquery will you please guide me How create journal for network drive of DeviceType 4