Hi osquery team, Recently I used <https://github.c...
# general
j
Hi osquery team, Recently I used https://github.com/osquery/osquery/blob/master/tools/analysis/profile.py script trying to do a performance test for some queries. I noticed we can only use osqueryi as the shell to run the script. Is there a way to use osqueryd to do this performance test using the script? There are some of our osqueryd config didn't apply during the test. (e.g watchdog limits)
f
if you run
osqueryd -S
you essentially get osqueryi. passing your config arguments to that should get you close to what you are trying to do. caveat: i haven't tried to run the profile tool myself in this way.
j
I guess
osqueryd -S
is the same as running
osqueryi
directly. I think what I want to achieve is let the profile.py script connect osqueryd extension socket. So cmd
osqueryi --connect /var/osquery/osqeury.em
probably works.
I changed the profile.py script a bit to run cmd
osqueryi --connect /var/osquery/osqeury.em
. But, looks like psutil can't record the right process stats.