has anyone been able to set the secret and tls cert path in osquery.flag in windows? If i set the full path "C:\Program Files\osquery\secret.txt" it is unable to read it but if i just set it as secret.txt and cd into the dir and run osqueryd --flagfile="C:\Program Files\osquery\osquery.flag" it works.

This should generally work, but it sounds like you’re hitting a quoting issue.

@seph yeah for some reason it doesnt. it keeps outputting the error "unable to read tls cert: <path>"

https://osquery.readthedocs.io/en/latest/installation/cli-flags/#flagfile

NOTICE: Flags in a flagfile should not be wrapped in quotes, shell-macro/variable expansion is not applied!

Have you tried removing the quotes?

@Stefano Bonicatti thank you! that did the trick.

Yea I had same problem as you but can see you sorted it 🙂