Does anyone know if there's an osquery flag that toggles support for Thrift on/off? I was working on some Python code that retrieves process events via the Thrift API, but I'm not sure why the transport is failing after adding support for events. 🤷

AFAIK thrift is not directly controllable. It’s the communications mechanism for extensions. So, perhaps you want to work through the flags at https://osquery.readthedocs.io/en/stable/deployment/extensions/