Title
#general
Grace P

Grace P

09/04/2020, 7:34 PM
hello all ! , is there way that osquery could see custom configuration files ? by example one on /opt/product/etc/test.conf
sundsta

sundsta

09/04/2020, 7:49 PM
If it’s a common format, it may already be parsed using the built-in lenses for the
augeas
table. If not, you can write a new lens to parse that type of config
Grace P

Grace P

09/04/2020, 10:40 PM
thanks for your answer, it is a format key=value , but when I query with osquery it returns empty ...
10:42 PM
I guess it is not 'loaded' when osquery init, is there a way to load ? perhaps I missing some concept on osquery
sundsta

sundsta

09/04/2020, 11:35 PM
You will want to be sure the
--augeas_lenses
flag points to where your lenses are.
Grace P

Grace P

09/07/2020, 11:52 PM
thank you , I'm using osquery by default, I started to research what the lenses are ...