https://github.com/osquery/osquery logo
Title
j

Jason NG

07/06/2021, 1:37 AM
has anyone been able to set the secret and tls cert path in osquery.flag in windows? If i set the full path "C:\Program Files\osquery\secret.txt" it is unable to read it but if i just set it as secret.txt and cd into the dir and run osqueryd --flagfile="C:\Program Files\osquery\osquery.flag" it works.
s

seph

07/06/2021, 2:47 AM
This should generally work, but it sounds like you’re hitting a quoting issue.
j

Jason NG

07/06/2021, 3:00 AM
@seph yeah for some reason it doesnt. it keeps outputting the error "unable to read tls cert: <path>"
s

Stefano Bonicatti

07/06/2021, 7:39 AM
https://osquery.readthedocs.io/en/latest/installation/cli-flags/#flagfile
NOTICE: Flags in a flagfile should not be wrapped in quotes, shell-macro/variable expansion is not applied!
Have you tried removing the quotes?
j

Jason NG

07/06/2021, 9:31 AM
@Stefano Bonicatti thank you! that did the trick.
m

Mystery Incorporated

07/10/2021, 2:51 AM
Yea I had same problem as you but can see you sorted it 🙂