Hey... I'm new to osquery. I've installed the package on Ubuntu 18.04. I've tried getting osqueryd to start with the default config as well as with my own. I get the following error messages when trying to start it:
root@apparmor:/var/run# osqueryd --ephemeral --database_path /tmp/osquery.db --verbose
I0718 184836.344167 10068 init.cpp:416] osquery initialized [version=3.3.2]
I0718 184836.348201 10068 extensions.cpp:343] Could not autoload extensions: Failed reading: /etc/osquery/extensions.load
I0718 184836.348945 10069 processes.cpp:441] Cannot read /proc/10068/io (is osquery running as root?)
I0718 184836.349445 10069 watcher.cpp:583] osqueryd watcher (10068) executing worker (10070)
I0718 184836.351735 10069 processes.cpp:441] Cannot read /proc/10068/io (is osquery running as root?)
E0718 184836.352229 10070 process.cpp:118] osqueryd could not start worker process