I am facing the issue Extension socket not available var osq

Question

I am facing the issue Extension socket not available var osquery osquery em when try to execute below cpp program int main int argc char argv osquery Initializer runner argc argv ToolType EXTENSION auto status = startExtension example 0 0 1 if status ok LOG ERROR lt lt status getMessage runner requestShutdown status getCode requesting a help here

Mike Myers · Answer

1 can you confirm that the osquery core process is running and that the extension socket is open at the location ` var osquery osquery em` before the extension is launched 2 do any of the osquery example extensions work 3 we also have < CBMR0L7SM|extensions> channel

Mike Myers · Answer

`select value from osquery flags where name = extensions socket ` confirms where the extension socket is

Mike Myers · Answer

also make sure that both osquery and the extension are running as root or administrator that might be an issue also there are flags like ` disable extensions=false` that must be set

Praveen Kumar · Answer

you see my screenshot from the xcode Extension socket not available

Mike Myers · Answer

Yes Please try checking 1 and 2 from here <https osquery slack com archives C08V7KTJB p1662482670847639 thread ts=1662215851 807419 amp cid=C08V7KTJB>