I’m trying to find examples of the usage of

number_monitoring

but I haven’t come across any. It looks like maybe this was planned, but never done? Anybody have any pointers here? I’d love to contribute that back to docs.

I’m not sure I’m familiar with this… Digging at the source tree, I see

numeric_monitoring

? Looks under documented, but somewhat introduced in https://github.com/osquery/osquery/pull/4626 I’d say enable it and see if it works, then doc it 🙂

um yes that’s the correct param facepalm . Thanks for the point to the PR. I’ll poke!