Hi! Community I am new to osquery and recently sta...
# general
m
Hi! Community I am new to osquery and recently started setting up the osquery in a docker container..(debian) but encountered following issue.
Error registering subscriber: process_file_events: Subscriber disabled via configuration
Error registering subscriber: selinux_events: Subscriber disabled via configuration
Error registering subscriber: socket_events: Subscriber disabled via configuration
[auditdnetlink.cpp:618] *Failed to set the netlink owner*
could one please help me out..
My main issue is "failed to set the netlink owner"
this may be a very basic issue but I not able to figure is out after trying for a while. I was able to setup everything in a normal vm environment but docker container is giving me issues. little help is appreciated. Thanks in advance.