I've deployed osquery on many, many hosts with no ...
# general
k
I've deployed osquery on many, many hosts with no problems, all using the same configs. However, on a Debian 11 box, I cannot get it to start. When I enter
systemctl status osqueryd
I get the following error:
osqueryd.service: Scheduled restart job restart counter is at 5
Stopped the osquery Daemon.
osqueryd.service: Start request repeated too quickly.
osqueryd.service: Failed with result 'exit-code'
Failed to start The osquery Daemon
What could be causing osqueryd to not start?
j
You may want to look at the logs from osqueryd itself, or try running in in the foreground with various debugging options turned on. It may show you what the root cause is.