Hi everyone, I have posted an issue (#7144) on the...
# core
n
Hi everyone, I have posted an issue (#7144) on the Osquery Github, and I dont' know how to put #blueprint label. Could someone tells me how do it? thnks
a
I was looking at the issue you created: 1. You can try to disable the database
--disable_database
and/or change its path
--database_path=/path/to/db
2. You can disable the pid file with
--ephemeral
or change its path with
--pidfile=/path/to/pidfile
You may also want to add
--verbose
to print some more debug info
👌 1
Launching the shell instead of the deamon is probably easier to start with; this can be done by adding
-S
to the parameters (or launching
osqueryi
instead of
osqueryd
)