https://github.com/osquery/osquery logo
s

Stefano Bonicatti

12/23/2020, 8:54 PM
That is another table though, which Audit based vs INotify
s

Samuel Carvalho

12/23/2020, 9:39 PM
I understand. But Why the select * from file_events is totally blank
s

Samuel Carvalho

12/23/2020, 11:48 PM
Perfect @Stefano Bonicatti. I ran osqueryi and now I can see the records. tks.
🎉 1