https://github.com/osquery/osquery logo
Title
n

n8felton

04/08/2022, 5:32 PM
I have confirmed that running it alone has output
log show --last=1h --predicate "processImagePath contains 'mdmclient'" --style json
z

zwass

04/08/2022, 5:33 PM
Do you get any error? I get a ton of results when I copy/paste your query into
sudo orbit shell
.
n

n8felton

04/08/2022, 5:36 PM
full output
it just returns nothing