osqueryi

will take statements on the command line.

as one of of the command line. I see the ability with osqueryi to do a single query, but not a bunch in sequence.

Me neither. Can you use osqueryd and a config file?

you can do

osqueryi < my_file_containing_queries.txt

You do need the newline. I made a test case, and forgot and didn’t followup. Thanks!

ah sweet, thanks y’all

I’d love to hear more about the use case. I think most of us assume this kind of thing happens via osqueryd, so when that’s not the case, I’d like to learn more about it

I've done it because it's easier to edit complex queries in my editor than in the sqlite/osqueryi interface

I only wanted to for benchmarking purposes. Easier to run it manually instead of timing it with the schedule interval

Ah, yeah…