chris
07/03/2018, 6:47 PM# ps aux | grep \[o\]sq
root 30605 0.0 0.2 219664 9848 ? SNsl 14:47 0:00 /usr/bin/osqueryd --flagfile /etc/osquery/osquery.flags --config_path /etc/osquery/osquery.conf
# cat /etc/osquery/osquery.flags
--config_plugin="tls"
--config_path="<https://mysite.com/osquery.conf>"
--config_refresh=60
# osqueryi
Using a virtual database. Need help, type '.help'
osquery> select * from osquery_flags where name in ("config_plugin", "config_path");
+---------------+--------+--------------------------+---------------------------+---------------------------+------------+
| name | type | description | default_value | value | shell_only |
+---------------+--------+--------------------------+---------------------------+---------------------------+------------+
| config_path | string | Path to JSON config file | /etc/osquery/osquery.conf | /etc/osquery/osquery.conf | 0 |
| config_plugin | string | Config plugin name | filesystem | filesystem | 0 |
+---------------+--------+--------------------------+---------------------------+---------------------------+------------+