Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#general
Title
s
Stefano Bonicatti
12/23/2020, 8:54 PM
That is another table though, which Audit based vs INotify
s
Samuel Carvalho
12/23/2020, 9:39 PM
I understand. But Why the select * from file_events is totally blank
s
Stefano Bonicatti
12/23/2020, 9:58 PM
https://osquery.slack.com/archives/C08V7KTJB/p1608756745376000?thread_ts=1608753932.375100&cid=C08V7KTJB
is this relevant?
s
Samuel Carvalho
12/23/2020, 11:48 PM
Perfect
@Stefano Bonicatti
. I ran osqueryi and now I can see the records. tks.
🎉 1
Post