Question on extensions. Is it expected that piping will not work where interactive works ?

I was using a c++ extension but saw something similar. After a while I found that it was because the query was being executed before the extension had been loaded. If you add the

--extensions_require=

parameter to the call to osquery it waits for the extension to load before running the query

thanks this fixed it

[oracle@c132613c345e oradata]$ echo "select * from oracle_homes;" | osqueryi -json --extensions_require=oracle --extension oracle.py

Why not pass the sql on the command line?

I think if you do that you get the same issue. So you can but either way you have to specify you want to wait for the extension.