<@UF63BUA3A> I am a bit confused as in I am not us...
# generals
sonal k
10/08/2021, 4:35 AM@Stefano Bonicatti I am a bit confused as in I am not using this log_result_events flag in my osquery.flags file...so why am I still getting this...
s
Stefano Bonicatti
10/08/2021, 10:26 AMIn the screenshot showing your .conf file, you have the
"options""log_result_events":"true"Stefano Bonicatti
10/08/2021, 10:28 AMSome flags are CLI only and should be set only via CLI when launching osquery, or via flagfile, but other flags/configurations can be set via the .conf file.
There’s still a bug where we don’t properly enforce that, but the idea is that CLI only flags can be set at startup only, while configuration options can be changed and applied at runtime.
Stefano Bonicatti
10/08/2021, 10:29 AMAgain the
osqueryd --helps
sonal k
10/08/2021, 11:43 AMokay I understood.👍
also when I run "osqueryd --help" I get no such command message...why is so..?
s
Stefano Bonicatti
10/08/2021, 11:50 AMProbably osqueryd is not in your
PATHosqueryi --helps
sonal k
10/08/2021, 12:56 PMyes its osquery 5.0.1.
and osqueryi --helps work
3 Views