Title
#general
g

groob

12/18/2020, 12:09 PM
@Wojtek you're probably specifying '--verbose true' which breaks flag parsing
w

Wojtek

12/31/2020, 5:33 AM
@groob nope, i am running it as below. it works ok without --verbose flag.
% osqueryd --flagfile flags --verbose
  I1231 06:32:55.221779 219520512 init.cpp:340] osquery initialized [version=4.6.0] I1231 06:32:55.268327 219520512 system.cpp:342] Found stale process for osqueryd (58966) I1231 06:32:55.268671 219520512 system.cpp:374] Writing osqueryd pid (59080) to /Users/wojtas/Projects/fleet/osquery.pid I1231 06:32:55.269155 219520512 extensions.cpp:438] Found autoloadable extension: /Users/wojtas/Projects/fleet/my_table_plugin.ext I1231 06:32:55.269217 219520512 dispatcher.cpp:78] Adding new service: WatcherRunner (0x7f99de50c318) to thread: 0x700009796000 (0x7f99de51e510) in process 59080 I1231 06:32:55.270006 158949376 watcher.cpp:613] osqueryd watcher (59080) executing worker (59081) I1231 06:32:55.272969 158949376 watcher.cpp:659] Created and monitoring extension child (59082): /Users/wojtas/Projects/fleet/my_table_plugin.ext 2020/12/31 06:32:55 Missing required --socket argument I1231 06:32:55.294132 297766400 init.cpp:337] osquery worker initialized [watcher=59080] I1231 06:32:55.295222 297766400 dispatcher.cpp:78] Adding new service: WatcherWatcherRunner (0x7fb05ac140a8) to thread: 0x7000041ca000 (0x7fb05ac10b60) in process 59081 I1231 06:32:55.295393 297766400 rocksdb.cpp:132] Opening RocksDB handle: /Users/wojtas/Projects/fleet/rocks.db ^CI1231 06:32:56.281044 219520512 dispatcher.cpp:149] Thread: 0x10d159e00 requesting a stop I1231 06:32:56.281121 219520512 dispatcher.cpp:156] Service: 0x7f99de50c318 has been interrupted I1231 06:32:56.281168 219520512 dispatcher.cpp:122] Thread: 0x10d159e00 requesting a join I1231 06:32:56.281237 219520512 dispatcher.cpp:140] Service thread: 0x7f99de51e510 has joined I1231 06:32:56.281256 219520512 dispatcher.cpp:144] Services and threads have been cleared