groob
12/18/2020, 12:09 PMWojtek
12/31/2020, 5:33 AM% osqueryd --flagfile flags --verbose
I1231 06:32:55.221779 219520512 init.cpp:340] osquery initialized [version=4.6.0]
I1231 06:32:55.268327 219520512 system.cpp:342] Found stale process for osqueryd (58966)
I1231 06:32:55.268671 219520512 system.cpp:374] Writing osqueryd pid (59080) to /Users/wojtas/Projects/fleet/osquery.pid
I1231 06:32:55.269155 219520512 extensions.cpp:438] Found autoloadable extension: /Users/wojtas/Projects/fleet/my_table_plugin.ext
I1231 06:32:55.269217 219520512 dispatcher.cpp:78] Adding new service: WatcherRunner (0x7f99de50c318) to thread: 0x700009796000 (0x7f99de51e510) in process 59080
I1231 06:32:55.270006 158949376 watcher.cpp:613] osqueryd watcher (59080) executing worker (59081)
I1231 06:32:55.272969 158949376 watcher.cpp:659] Created and monitoring extension child (59082): /Users/wojtas/Projects/fleet/my_table_plugin.ext
2020/12/31 06:32:55 Missing required --socket argument
I1231 06:32:55.294132 297766400 init.cpp:337] osquery worker initialized [watcher=59080]
I1231 06:32:55.295222 297766400 dispatcher.cpp:78] Adding new service: WatcherWatcherRunner (0x7fb05ac140a8) to thread: 0x7000041ca000 (0x7fb05ac10b60) in process 59081
I1231 06:32:55.295393 297766400 rocksdb.cpp:132] Opening RocksDB handle: /Users/wojtas/Projects/fleet/rocks.db
^CI1231 06:32:56.281044 219520512 dispatcher.cpp:149] Thread: 0x10d159e00 requesting a stop
I1231 06:32:56.281121 219520512 dispatcher.cpp:156] Service: 0x7f99de50c318 has been interrupted
I1231 06:32:56.281168 219520512 dispatcher.cpp:122] Thread: 0x10d159e00 requesting a join
I1231 06:32:56.281237 219520512 dispatcher.cpp:140] Service thread: 0x7f99de51e510 has joined
I1231 06:32:56.281256 219520512 dispatcher.cpp:144] Services and threads have been cleared