returns results but
returns 0 results?
SELECT * FROM docker_container_processes process JOIN docker_containers container ON container.id=process.id
SELECT * FROM docker_container_processes process LEFT JOIN docker_containers container ON container.id=process.id
, I have described this nuance in the following blog article: https://blog.kolide.com/running-osquery-as-sudo-root-vs-user-4fcfc698c45e
SELECT * FROM docker_containers container CROSS JOIN docker_container_processes process ON container.id=process.id;
cannot work in the order you are trying query, because you are trying to
without a required where condition.
SELECT * FROM docker_container_processes
alone appears to be working as I can see results. In the 2nd case
does not appear to be working. Thanks I’ll check out
@ec4 it is working by lucklol story of my life. Thanks for explaining that