hello all ! , is there way that osquery could see custom configuration files ? by example one on /opt/product/etc/test.conf

If it’s a common format, it may already be parsed using the built-in lenses for the

augeas

table. If not, you can write a new lens to parse that type of config

thanks for your answer, it is a format key=value , but when I query with osquery it returns empty ...

You will want to be sure the

--augeas_lenses

flag points to where your lenses are.

thank you , I'm using osquery by default, I started to research what the lenses are ...