pretty stumped, if anyone has any suggestions. We’...
# macos
a
pretty stumped, if anyone has any suggestions. We’re using TLS endpoints, and they get the config fine and run queries. However, for one it’s not returning any value - it definitely runs though it says ‘storing result for query…’ in the logs. I’ve triggered a new epoch, and it runs all the queries again including the query but no result value is returned to the logger endpoint. The query is v simple
select * from screenlock;
this is happening for all macos endpoints that have that query If I run osqueryd manually rather than from a daemon it sends a value, it’s using the same tls flag file and the osqueryd binary is the same as the daemon triggers (ie I’m just running the command from terminal directly that the daemon does)