so now i’ve abandoned the filesystem config_plugin...
# general
c
so now i’ve abandoned the filesystem config_plugin and i’m trying to use the flags_file but it doesn’t seem to be configuring correctly
Copy code
# ps aux | grep \[o\]sq
root     30605  0.0  0.2 219664  9848 ?        SNsl 14:47   0:00 /usr/bin/osqueryd --flagfile /etc/osquery/osquery.flags --config_path /etc/osquery/osquery.conf

# cat /etc/osquery/osquery.flags
--config_plugin="tls"
--config_path="<https://mysite.com/osquery.conf>"
--config_refresh=60

# osqueryi
Using a virtual database. Need help, type '.help'
osquery> select * from osquery_flags where name in ("config_plugin", "config_path");
+---------------+--------+--------------------------+---------------------------+---------------------------+------------+
| name          | type   | description              | default_value             | value                     | shell_only |
+---------------+--------+--------------------------+---------------------------+---------------------------+------------+
| config_path   | string | Path to JSON config file | /etc/osquery/osquery.conf | /etc/osquery/osquery.conf | 0          |
| config_plugin | string | Config plugin name       | filesystem                | filesystem                | 0          |
+---------------+--------+--------------------------+---------------------------+---------------------------+------------+