Mystery Incorporated

Mystery Incorporated

09/17/2021, 3:10 PM
It seems that python packages on linux are not being updated in the table, when I run the query to list python packages, it returns a list containing old packages that have since been updated and doesn't show the new ones. it's like super broken.


09/17/2021, 3:24 PM
How are you debugging this? Are you using osqueryi vs some distributed query interface?
3:43 PM
To future readers… Conclusion in https://osquery.slack.com/archives/C08V7KTJB/p1631264842097700 was that is confusing because osquery does not sort the output. So the newer version was below the fold.