ec4
11/24/2021, 5:12 PMjoin
returns results but left join
returns 0 results?
SELECT *
FROM docker_container_processes process
JOIN docker_containers container ON container.id=process.id
vs.
SELECT *
FROM docker_container_processes process
LEFT JOIN docker_containers container ON container.id=process.id
fritz
11/24/2021, 6:29 PMCROSS JOIN
, I have described this nuance in the following blog article: https://blog.kolide.com/running-osquery-as-sudo-root-vs-user-4fcfc698c45eSELECT *
FROM docker_containers container
CROSS JOIN docker_container_processes process ON container.id=process.id;
LEFT JOIN
cannot work in the order you are trying query, because you are trying to SELECT * FROM docker_container_processes
without a required where condition.ec4
11/24/2021, 8:57 PMjoin
alone appears to be working as I can see results. In the 2nd case left join
does not appear to be working.
Thanks I’ll check out cross
and where
🙇fritz
11/24/2021, 8:58 PMec4
11/24/2021, 8:58 PM@ec4Â it is working by lucklol story of my life. Thanks for explaining that
fritz
11/24/2021, 8:59 PM