auto sw_vers = SQL::selectAllFrom("plist", "path", EQUALS, kVersionPath); kVersionPath = '/System/Library/CoreServices/SystemVersion.plist' fetchs the empty data. please look into this
09/07/2022, 3:02 PM
Hi @Praveen Kumar. I see that you posted this in #general as we discussed, thanks for that! I know that osquery and Xcode don't play particularly well together. Since the code in question doesn't seem to have been altered, I'd imagine that's why you're seeing odd values.
09/07/2022, 3:35 PM
I requested for the OS info from the selectAllFrom API which returns empty list. What to do here ?
09/16/2022, 3:53 AM
Hey @Praveen Kumar, would you mind sharing the final SQL of the generated query? I think it would help make this easier to troubleshoot.
We’re in the process of improving docs for osquery tables, so I'm especially interested in getting to the bottom of this so we can make the docs clearer about any gotchas with this table.