Juan Alvarez
12/29/2020, 1:34 PMdisable_tables
config from fleet config yaml? For me, it seems that the value is pushed, since running a query to osquery_flags
gives me the right value but the table does not get disabled. For some reason, OSQuery is ignoring it...
I could see a similar behavior in https://github.com/osquery/osquery/issues/6041 but it seems like that bug is already fixed (im using OSQuery 4.5.0)zwass
12/29/2020, 4:01 PMtheopolis
12/29/2020, 4:39 PMdisable_tables
should be a flag only (not a configuration option)zwass
12/29/2020, 4:44 PMtheopolis
12/29/2020, 4:48 PMJuan Alvarez
12/29/2020, 5:15 PMoptions