Hi everyone! Can someone help me please? I am doing some tests with Osquery on Windows 10 with some queries I tried to write by myself. These queries work alone when I use them with osqueryi, and also if I put them in the osquery.conf file in "schedule" section and the run osqueryd. The problem appears when I try to put in the schedule section more than one of them, like for example 10 queries. In this case when i run the daemon I cannot see any log in the results. If someone can help me, thanks a lot.
01/27/2022, 7:05 PM
Hey @Federico Talentino are the schedule keys unique?
01/27/2022, 8:22 PM
Hi @koo ! Yes, the schedule keys are already different 😞