rmday
11/30/2018, 4:01 PMsystemctl status osqueryd -l
● osqueryd.service - The osquery Daemon
Loaded: loaded (/usr/lib/systemd/system/osqueryd.service; disabled; vendor preset: disabled)
Active: active (running) since Fri 2018-11-30 10:59:56 EST; 10s ago
Process: 8500 ExecStartPre=/bin/sh -c if [ -f $LOCAL_PIDFILE ]; then mv $LOCAL_PIDFILE $PIDFILE; fi (code=exited, status=0/SUCCESS)
Process: 8498 ExecStartPre=/bin/sh -c if [ ! -f $FLAG_FILE ]; then touch $FLAG_FILE; fi (code=exited, status=0/SUCCESS)
Main PID: 8503 (osqueryd)
CGroup: /system.slice/osqueryd.service
├─8503 /usr/bin/osqueryd --flagfile /etc/osquery/osquery.flags --config_path /etc/osquery/osquery.conf
└─8506 /usr/bin/osqueryd
Nov 30 10:59:56 bl-uts-dlosq01 systemd[1]: Starting The osquery Daemon...
Nov 30 10:59:56 bl-uts-dlosq01 systemd[1]: Started The osquery Daemon.
Nov 30 10:59:56 bl-uts-dlosq01 osqueryd[8503]: osqueryd started [version=3.2.6]
Nov 30 11:00:01 bl-uts-dlosq01 osqueryd[8503]: W1130 11:00:01.675535 8506 init.cpp:667] Error reading config: Request error: Failed to connect to <http://bl-uts-dlosq01.uits.iu.edu:8080|bl-uts-dlosq01.uits.iu.edu:8080>: Connection refused
Nov 30 11:00:02 bl-uts-dlosq01 osqueryd[8503]: I1130 11:00:02.418464 8506 events.cpp:825] Event publisher not enabled: auditeventpublisher: Publisher disabled via configuration
Nov 30 11:00:02 bl-uts-dlosq01 osqueryd[8503]: I1130 11:00:02.419337 8506 events.cpp:825] Event publisher not enabled: syslog: Publisher disabled via configuration