Title
#fleet
r

ryan

01/04/2022, 8:59 PM
I can run
select * from chrome_extensions;
from osqueryi but when I run in Fleet it doesn't return any results. No errors either. Running 4.8
zwass

zwass

01/04/2022, 9:10 PM
I see in your other thread that you may have typoed the table name. Are you running the exact same query in Fleet?
9:11 PM
If so, it's possible you are running into the difference between running osquery as root vs. nonroot. If you're running as root you may need to use
select * from users cross join chrome_extensions using (uid);
r

ryan

01/04/2022, 10:18 PM
That did it