good afternoon guys! qq: what was the flag I need to give to have content in table
? I thought there was a flag....Thanks a bunch 😄
10/11/2018, 8:11 PM
Does - - disable_events=false work for you?
On mobile so can’t do my fancy formatting :)
10/12/2018, 8:48 PM
unfortunately it didn't 😞
@thor can you educate me a little on what exactly is this table for? Can't seem to find that in the docs 😞 Thank you sir!
10/13/2018, 3:26 AM
Hey @jackjack, have you checked out this part of the readthedocs on our eventing framework? https://osquery.readthedocs.io/en/stable/development/pubsub-framework/ That might give some more overview as to how it works, but in essence that table is for "flight recording" process executions, so enabling the events should have osquery start monitoring process starts