Yes, and what I did is put all the directives in t...
# general
f
Yes, and what I did is put all the directives in that config file that osqueryd needs to run properly, including enabling events and syslog. So I'm using one config file, whether I'm doing ad-hoc queries or for scheduled queries with osqueryd.