good afternoon guys! qq: what was the flag I need ...
# generalj
jackjack
10/09/2018, 7:14 PMgood afternoon guys! qq: what was the flag I need to give to have content in table
process_eventst
thor
10/11/2018, 8:11 PM
Does - - disable_events=false work for you?
thor
10/11/2018, 8:11 PM
On mobile so can’t do my fancy formatting :)
j
jackjack
10/12/2018, 8:48 PMunfortunately it didn't 😞
jackjack
10/12/2018, 9:07 PM@thor can you educate me a little on what exactly is this table for? Can't seem to find that in the docs 😞 Thank you sir!
t
thor
10/13/2018, 3:26 AM
Hey @jackjack, have you checked out this part of the readthedocs on our eventing framework? https://osquery.readthedocs.io/en/stable/development/pubsub-framework/ That might give some more overview as to how it works, but in essence that table is for "flight recording" process executions, so enabling the events should have osquery start monitoring process starts
10 Views