Title
#core
rmday

rmday

11/30/2018, 2:57 PM
osqueryi --verbose --config_check --config_path=/etc/osquery/osquery.conf
I1130 09:56:46.967648  8215 init.cpp:396] osquery initialized [version=3.2.6]
I1130 09:56:46.967746  8215 extensions.cpp:342] Could not autoload extensions: Failed reading: /etc/osquery/extensions.load
I1130 09:56:46.967831  8215 init.cpp:633] Cannot start extension manager: Extensions disabled
I1130 09:56:46.967851  8215 auto_constructed_tables.cpp:85] Removing stale ATC entries
I1130 09:56:47.022346  8215 smbios_tables.cpp:102] Reading SMBIOS from sysfs DMI node
packetzero

packetzero

11/30/2018, 3:00 PM
There are some decent docs here: https://osquery.readthedocs.io/en/stable/
rmday

rmday

11/30/2018, 3:02 PM
Thanks! Yeah, I have that up in a tab looking it over...