Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#general
Title
z
Zander Mackie
10/13/2021, 5:26 PM
I wonder if you could use the prometheus table for this?
https://osquery.readthedocs.io/en/stable/deployment/configuration/#configuration-components
(see prometheus)
s
sp
10/13/2021, 5:34 PM
So in this case, osquery will be pulling like prometheus right ? I was looking for push, so that we dont miss events and process can send immediately
z
Zander Mackie
10/13/2021, 5:37 PM
got it. this would be pull, yet.
s
sp
10/13/2021, 5:48 PM
Yeah thanks
4 Views
Post