Configured osquery for all the events. Still I am ...
# general
b
Configured osquery for all the events. Still I am getting below error. "Table syslog_events is event-based but events are disabled". However osquery log is getting syslog.
z
Are you getting that error in osqueryi? By default events are disabled there.
s
Please add the below line to the config and restart osquery "disable_events": "false",