Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Can you be more specific? “The config/flags work with no errors?”

when running `osqueryd` as a daemon, I don't see any apparent errors in `journalctl -f`, however I do when I run `osqueryi` on the test instance.

This might be because `osqueryi` is reading `/etc/osquery/osquery.conf` but not `/etc/osquery/osquery.flags` (just a guess)

This is my guess because the usage of the flagfile with `osqueryd` happens in the systemd or init config.