good afternoon guys qq what was the flag I need to give to h

Question

good afternoon guys qq what was the flag I need to give to have content in table `process events` I thought there was a flag Thanks a bunch smile

thor · Answer

Does disable events=false work for you

thor · Answer

On mobile so can t do my fancy formatting

jackjack · Answer

unfortunately it didn t disappointed

jackjack · Answer

< thor> can you educate me a little on what exactly is this table for Can t seem to find that in the docs disappointed Thank you sir

thor · Answer

Hey < jackjack> have you checked out this part of the readthedocs on our eventing framework That might give some more overview as to how it works but in essence that table is for flight recording process executions so enabling the events should have osquery start monitoring process starts