Hello 'Guardians of the osquery" do you find <http...
# general
n
Hello 'Guardians of the osquery" do you find https://github.com/osquery/osquery/pull/3482, still relevant?
t
Good question, the concept of forwarding directly to logger plugins is something that has been talked about recently. I cannot find the recent issue/discussion. I think everyone agrees: - Having this option would be great. - It should not be on by-default due to potential of data loss.
n
Sorry, I did not get "potential of data loss"
t
^ When an event is stored in the DB the log-sending logic can be retried.
n
Forgive my naivety. Can you please explain a little more?
There is one more question, I believe facebook guys were also making changes to achieve this, so are they going to contribute that work?