https://github.com/osquery/osquery logo
Title
n

npamnani

10/23/2019, 8:06 AM
Hello 'Guardians of the osquery" do you find https://github.com/osquery/osquery/pull/3482, still relevant?
t

theopolis

10/23/2019, 3:54 PM
Good question, the concept of forwarding directly to logger plugins is something that has been talked about recently. I cannot find the recent issue/discussion. I think everyone agrees: - Having this option would be great. - It should not be on by-default due to potential of data loss.
n

npamnani

10/23/2019, 4:43 PM
Sorry, I did not get "potential of data loss"
t

theopolis

10/23/2019, 5:40 PM
^ When an event is stored in the DB the log-sending logic can be retried.
n

npamnani

10/24/2019, 4:49 AM
Forgive my naivety. Can you please explain a little more?
There is one more question, I believe facebook guys were also making changes to achieve this, so are they going to contribute that work?