10/12/2022, 7:40 PM
Hi osquery team, when we start the osquery as system service, and we need to offer the following cfg in the osqueryd FLAG_FILE="/etc/osquery/flagfile.txt" CONFIG_FILE="/etc/osquery/osquery.conf" LOCAL_PIDFILE="/var/osquery/osqueryd.pidfile" PIDFILE="/var/run/osqueryd.pidfile" but we actually dont offer osquery.conf actually, and it doesn't impact osquery running, i would like to know, if we dont offer it, where does osquery get the cfg instead? what kind of cfg items could be included in this cfg file?