There is no implementation for `osquery.flags` fil...
# general
g
There is no implementation for
osquery.flags
file to reference variables, right? e.g.:
Copy code
--config_path=%ProgramFiles%\osquery\osquery.conf
s
Do you mean for settings things like
file_paths
, or the
schedule
?
or actually, sorry I got confused by the config file shown there. I think you're referring to the environment variable
%ProgramFiles%
gflags doesn't seem to support it, and osquery is not attempting to expand the path
so no, it would be the shell job, if any
g
Thanks for confirming, @Stefano Bonicatti! Would there be an interest of such feature? I think it may be useful in some cases, because Windows not necessarily be installed in
C:\
drive. When creating portable osquery package, I have to “assume” where the system drive is located.