Hey... I'm new to osquery. I've installed the pa...
# general
c
Hey... I'm new to osquery. I've installed the package on Ubuntu 18.04. I've tried getting osqueryd to start with the default config as well as with my own. I get the following error messages when trying to start it: root@apparmor:/var/run# osqueryd --ephemeral --database_path /tmp/osquery.db --verbose I0718 184836.344167 10068 init.cpp:416] osquery initialized [version=3.3.2] I0718 184836.348201 10068 extensions.cpp:343] Could not autoload extensions: Failed reading: /etc/osquery/extensions.load I0718 184836.348945 10069 processes.cpp:441] Cannot read /proc/10068/io (is osquery running as root?) I0718 184836.349445 10069 watcher.cpp:583] osqueryd watcher (10068) executing worker (10070) I0718 184836.351735 10069 processes.cpp:441] Cannot read /proc/10068/io (is osquery running as root?) E0718 184836.352229 10070 process.cpp:118] osqueryd could not start worker process