https://github.com/osquery/osquery logo
a

Antoinette

03/11/2021, 9:25 PM
Hey all is there a delay between when a command is ran and when it gets populated in the
shell_history
table?
z

zwass

03/11/2021, 9:31 PM
I don't think there should be. I believe that table reads directly from the history file. Maybe the shell is not configured to write to the history file immediately (or at all)?
a

Antoinette

03/11/2021, 9:32 PM
-.-'' It has logs up until about a day ago. I'll cry if someone changed that
Thanks Zach!
z

zwass

03/11/2021, 9:35 PM
Good luck 🙂