Join Slack
Powered by
i just booted up a centos6 VM, installed osquery o...
# general
c
clong
01/16/2017, 7:43 PM
i just booted up a centos6 VM, installed osquery on it, but im not seeing any of my shell history via
select * from users join shell_history using (uid);
— are there any gotchas around minimum history size or how osquery reads the history files? tried as root and as a user and no dice 😞
2
Views
Open in Slack
Previous
Next