The OSQUERY interactive shell(osqueryi) with option --logger_min_status=3+ will suppress all the status messages. The minimum level for status log recording. Use the following values: INFO = 0, WARNING = 1, ERROR = 2. To disable all status messages use 3+

[root@localhost ~]# osqueryi --logger_min_status=3
Using a virtual database. Need help, type '.help'

The option can be set in OSQUERY configuration file

/etc/osquery/osquery.conf

and should be read by both

osqueryi

and

osqueryd

.

“options:”  {
                     …
                     …
                     “logger_min_status” : “3”
                     …
                     ...
},

However, after setting the above option, osqueryi does not suppresses the status message and it still spills out database migration message. [root@localhost ~]# osqueryi I0618 082857.082639 4135 database.cpp:563] Checking database version for migration I0618 082857.083156 4135 database.cpp:587] Performing migration: 0 -> 1 I0618 082857.083426 4135 database.cpp:619] Migration 0 -> 1 successfully completed! I0618 082857.083627 4135 database.cpp:587] Performing migration: 1 -> 2 I0618 082857.083863 4135 database.cpp:619] Migration 1 -> 2 successfully completed! Using a virtual database. Need help, type '.help' I am not sure if it is a bug or i should use some other options in the osquery configuration file as well. Regards