osquery team, what are these files doing after ins...
# general
w
osquery team, what are these files doing after installation? and i need to move them out of /opt folder, how to make them working with new install path?
Copy code
/opt/osquery/share/osquery/lenses/{*}.aug
/opt/osquery/share/osquery/packs/{*}.conf
/opt/osquery/share/osquery/osquery.example.conf
and for /opt/osquery/bin/osqueryd, it looks like i just need to change /usr/lib/systemd/system/osqueryd.service and link it to new directory, right? what about /opt/osquery/bin/osqueryctl? if i move it to like usr/local/bin, is there any file i need to change?
s
Are you building the packages yourself? I think changing the install path is possible with these CMAKE env variables
CMAKE_INSTALL_PREFIX
and
CMAKE_PACKAGING_INSTALL_PREFIX
w
could you explain what do these files do when osquery agent running?