https://github.com/osquery/osquery logo
Title
k

krisrice

01/10/2019, 3:03 PM
Question on extensions. Is it expected that piping will not work where interactive works ?
( sorry for spelling )
n

nobody 162

01/10/2019, 3:31 PM
I was using a c++ extension but saw something similar. After a while I found that it was because the query was being executed before the extension had been loaded. If you add the
--extensions_require=
parameter to the call to osquery it waits for the extension to load before running the query
k

krisrice

01/10/2019, 3:40 PM
thanks this fixed it
[oracle@c132613c345e oradata]$ echo "select * from oracle_homes;" | osqueryi -json --extensions_require=oracle --extension oracle.py
s

seph

01/10/2019, 4:07 PM
Why not pass the sql on the command line?
n

nobody 162

01/10/2019, 4:09 PM
I think if you do that you get the same issue. So you can but either way you have to specify you want to wait for the extension.