Title
#core
Nico

Nico

06/07/2021, 12:16 PM
Hi everyone, I have posted an issue (#7144) on the Osquery Github, and I dont' know how to put #blueprint label. Could someone tells me how do it? thnks
a

alessandrogario

06/07/2021, 1:37 PM
I was looking at the issue you created: 1. You can try to disable the database
--disable_database
and/or change its path
--database_path=/path/to/db
2. You can disable the pid file with
--ephemeral
or change its path with
--pidfile=/path/to/pidfile
You may also want to add
--verbose
to print some more debug info
1:38 PM
Launching the shell instead of the deamon is probably easier to start with; this can be done by adding
-S
to the parameters (or launching
osqueryi
instead of
osqueryd
)