Zweasta
07/19/2020, 10:51 PMseph
theopolis
Zweasta
07/20/2020, 12:07 AMosqueryi.
a particular machine
of mine, gives the return code as 78. So, how should I report this ? I believe there is something wrong in the environment of my machine, maybe something related to some osquery dependencies on my machine?seph
theopolis
Zweasta
07/20/2020, 12:35 AM$ osqueryi --json 'select * from os_version' --verbose
I0720 00:35:51.247476 49581 init.cpp:343] osquery initialized [version=4.4.0]
I0720 00:35:51.247583 49581 extensions.cpp:383] Could not autoload extensions: Failed reading: /etc/osquery/extensions.load
I0720 00:35:51.247655 49581 init.cpp:566] An error occured during extension manager startup: Extensions disabled
I0720 00:35:51.247686 49581 auto_constructed_tables.cpp:96] Removing stale ATC entries
[
{"arch":"x86_64","build":"","codename":"","major":"7","minor":"8","name":"CentOS Linux","patch":"2003","platform":"rhel","platform_like":"rhel","version":"CentOS Linux release 7.8.2003 (Core)"}
]
$ echo $?
78
theopolis
Zweasta
07/20/2020, 12:47 AMtheopolis
--config_plugin=filesystem --config_path=/dev/null
--disable_database
--extensions_socket=/dev/null
seph
dmesg | tail
may be interesting. (After the osquery command)Zweasta
07/20/2020, 12:43 PM--config_plugin=filesystem --config_path=/dev/null
This worked like a charm. Now, it is working fine.. Can you help me understand my issue here ? @seph Now, as it is working fine, do you want me to send you the logs ?theopolis
Zweasta
07/21/2020, 2:34 PM--config_plugin=filesystem --config_path=/dev/null
to all the queries, I just wanted to get some more info on the root cause.seph
Zweasta
07/21/2020, 3:50 PM