#534 Osquery decorator for getting username Issue created by zhuoyuan-liu Hi @javuto , I can see that in the default setup, it uses the decorator

SELECT user || ' (' || tty || ')' AS username FROM logged_in_users WHERE type = 'user' ORDER BY time LIMIT 1;

to get the username of the node. However, after our testing, it will always return empty results, and all last users shown

unknown

. Is there something updated with the query? jmpsec/osctrl