Zach Zeid
09/17/2020, 3:04 PMtheopolis
09/17/2020, 8:05 PMosquery_schedule
https://github.com/osquery/osquery/blob/master/packs/osquery-monitoring.conf#L4Zach Zeid
09/17/2020, 10:52 PMosqueryi
doesn't show me much information about other queries. Does it need to be a part of a pack to get that info?osqueryi
gets
select name, interval, executions, output_size, wall_time, (user_time/executions) as avg_user_time, (system_time/executions) as avg_system_time, average_memory, last_executed from osquery_schedule;
+-------------------------------+----------+------------+-------------+-----------+---------------+-----------------+----------------+---------------+
| name | interval | executions | output_size | wall_time | avg_user_time | avg_system_time | average_memory | last_executed |
+-------------------------------+----------+------------+-------------+-----------+---------------+-----------------+----------------+---------------+
| installed_homebrew_packages_1 | 14400 | 0 | 0 | 0 | | | 0 | 0 |
theopolis
09/18/2020, 2:28 AMosqueryi
and osqueryd
do not talk to each other there is no way for the shell to know the current state or statistics of the daemon's schedule.Zach Zeid
09/18/2020, 1:06 PM