Title
#general
w

wennan.he

11/19/2022, 2:18 AM
osquery team, what are these files doing after installation? and i need to move them out of /opt folder, how to make them working with new install path?
/opt/osquery/share/osquery/lenses/{*}.aug
/opt/osquery/share/osquery/packs/{*}.conf
/opt/osquery/share/osquery/osquery.example.conf
and for /opt/osquery/bin/osqueryd, it looks like i just need to change /usr/lib/systemd/system/osqueryd.service and link it to new directory, right? what about /opt/osquery/bin/osqueryctl? if i move it to like usr/local/bin, is there any file i need to change?
s

sharvil

11/21/2022, 7:46 AM
Are you building the packages yourself? I think changing the install path is possible with these CMAKE env variables
CMAKE_INSTALL_PREFIX
and
CMAKE_PACKAGING_INSTALL_PREFIX
w

wennan.he

11/21/2022, 6:41 PM
could you explain what do these files do when osquery agent running?