Hello, am trying to enable Process_file_events tab...
# general
k
Hello, am trying to enable Process_file_events table. Updated below config in osquery.flag in host and query returns 0 values --disable_events=false --disable_audit=false --enable_file_events=true --audit_allow_config=true --audit_allow_fim_events=true --audit_allow_process_events=true --audit_persist=true --enable_bpf_events=true Updated the same config in fleetdm Global config still same result.