when i check in osqueryi with my flagfile, it work...
# general
l
when i check in osqueryi with my flagfile, it works:
Copy code
root@hostname osquery # osqueryi --flagfile=/var/osquery/osquery.flags
I0625 16:11:02.016269 2412589952 init.cpp:396] osquery initialized [version=3.2.6]
I0625 16:11:02.017613 2412589952 extensions.cpp:389] Found autoloadable extension: /var/osquery/extension.ext
I0625 16:11:02.017875 2412589952 auto_constructed_tables.cpp:85] Removing stale ATC entries
I0625 16:11:02.017880 186236928 interface.cpp:263] Extension manager service starting: /var/root/.osquery/shell.em
I0625 16:11:02.018560 184627200 watcher.cpp:596] Created and monitoring extension child (20675): /var/osquery/extension.ext
Using a virtual database. Need help, type '.help'
osquery> select * from foobar;
+-----+-----+
| foo | baz |
+-----+-----+
| bar | baz |
| bar | baz |
+-----+-----+
osquery>