so, I was doing a test of something on MacOS and d...
# general
r
so, I was doing a test of something on MacOS and did
kill -9 $OSQUERYDAEMONPID
,
rm *
in
/var/log/osquery/
and then restarted the daemon. OSQuery is running the configs, but there is nothing showing up in
/var/log/osquery/
now. The logger path in the osquery.conf is pointed at
/var/log/osquery
, so…how screwed am I? 😄