https://github.com/osquery/osquery logo
Title
k

Kemal

03/07/2018, 9:37 AM
@thor Do you have information about that output? I0307 12:36:24.151345 3140 extensions.cpp:300] Could not autoload extensions: Failed reading: \ProgramData\osquery\extensions.load
m

manu

03/07/2018, 2:19 PM
Looks like path issue.
C:
is missing. Try to add complete path to your
extensions.load
in flags file.
--extensions_autoload=C:\programdata\osquery\extensions.load
k

Kemal

03/08/2018, 8:17 AM
if so, this is a bug. @thor
t

thor

03/08/2018, 3:47 PM
How is this a bug? The extensions autoload path needs the same permissions as the daemon, and this should be heavily documented in the readthedocs, if not thats an issue.
k

Kemal

03/08/2018, 3:54 PM
İf the osquery install to certain folder (programdata) and the extention file already exists in default folder, in this case why do i need to modify or add a thing to a thing. İ think it should work without adding or modifying a thing
t

thor

03/08/2018, 4:07 PM
Who is putting the extension file there? From what I know this isn't something that osquery is dropping for you, so this is a "bug" with whatever endpoint management you're using 😐 and/or however you're configuring your flags file.