Hi There When I execute windows security products or windows

Question

Hi There When I execute windows security products or windows security center table on windows server I got error values or nothing because the WSCAPI dll is not present on Windows Server I got exit code 0 success in both cases Why in such a situation do I not get a exit code 1 or something failure

terracatta · Answer

Hi < ET> neither of these tables work on Windows Server We aren t sure why Microsoft does not allow this API on that specific platform Even copying the DLL from a normal Windows 10 computer does not work

terracatta · Answer

As for the exit code I do not believe osquery will return a non zero exit code for en errored query when the query is specified on the commany line

terracatta · Answer

Although I agree that is a good idea

ET · Answer

Thanks < terracatta> For example If the table is not exists I got exit code 1 ```Error no such table windows security productssssss EXIT CODE 1```

ET · Answer

So I got non zero exit code when the query is specified on the command line

terracatta · Answer

Yeah it is definitely inconsistent In this case you have a SQLite error but in the case of the windows table no error is thrown and instead a warning is logged and the table returns no results

terracatta · Answer

There are a number of tables in osquery that will return 0 results when something goes wrong under the hood like tha

terracatta · Answer

I agree though that in an ideal world this specific problem would produce a more explicit error

terracatta · Answer

vs a silent warning

ET · Answer

Oh okay now I understand your intent thanks again