I have a newbie question about extensions...Create...
# core
p
I have a newbie question about extensions...Created a small extension using osquery-python. Added the path to the extension in /etc/osquery/extensions.load to get it to autoload. I restarted osqueryd and I see the extension running using ps. If i interactively run osqueryi, I can see the table and get data. It all works perfectly. However, when I run an osqueryi command 'one-liner' (such as osqueryi .tables) I get a bunch of the following errors:
Copy code
# INFO:thrift.transport.TSocket:Could not connect to /root/.osquery/shell.em
Traceback (most recent call last):
  File "build/bdist.linux-x86_64/egg/thrift/transport/TSocket.py", line 104, in open
    handle.connect(sockaddr)
  File "/usr/lib64/python2.7/socket.py", line 224, in meth
    return getattr(self._sock,name)(*args)
error: [Errno 2] No such file or directory
ERROR:thrift.transport.TSocket:Could not connect to any of ['/root/.osquery/shell.em']
Any help would be vastly appreciated