https://github.com/osquery/osquery logo
k

Karthick

10/14/2022, 3:20 PM
Hello, am trying to enable Process_file_events table. Updated below config in osquery.flag in host and query returns 0 values --disable_events=false --disable_audit=false --enable_file_events=true --audit_allow_config=true --audit_allow_fim_events=true --audit_allow_process_events=true --audit_persist=true --enable_bpf_events=true Updated the same config in fleetdm Global config still same result.