i just booted up a centos6 VM, installed osquery o...
# general
c
i just booted up a centos6 VM, installed osquery on it, but im not seeing any of my shell history via
select * from users join shell_history using (uid);
— are there any gotchas around minimum history size or how osquery reads the history files? tried as root and as a user and no dice 😞