Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

image.png

I’m getting the same error (error1) because of the --disable_extensions=false isn’t set

but I don’t have any idea about the error number two (except your config file isn’t correct)

take C:\ProgramData\osquery\osquery.conf and run it through a JSON linter such as <https://jsonlint.com/>

you probably have a delimiter issue or something.

oh just saw your follow up. json linter will help you if you encounter this in the future.

Sometime I had similar issue, i had an extra delimiter , and after correction it worked fine.