Thanks. Is gen a symlink?

lol i was reading

is

as

ls

facepalm

😄 Okay, I think that might be the problem. I change the buck configuration so that you now have

buck-out/release/gen

and

buck-out/debug/gen

The goal is to be able to keep both builds at the same time. So I guess you're just running an older version of osquery, not the one you just built. Try to run

buck-out/release/gen/osquery/osqueryd -S

instead and let me know if it works.

yeah that works

Awesome