Hey, is there a way to find the boot time for Unix...
# general
o
Hey, is there a way to find the boot time for Unix systems using osquery? I saw that the
last
table includes the boot_time from
wtmp
file, however it's unreliable since in linux there's a use of
logrotate
and then after a month the boot_time won't appear in this table. Would like to know on any ideas / suggestion you guys have? Is there other way to find it in Linux that we can add as a feature / extension?