as normal user (expected since it’s a priv port) and then
if I run via sudo
Failed to start: initializing service: initializing osquery logging: create filesystem status logger: create new raw logger: open /tmp/osquery_status: permission denied
when running as root? Can you share the full command and output?
and show the results? We are looking to see if there are unusual permissions on that file.
sudo ls -l /tmp/osquery_status