Thanks for the awesome software.
For install osquery I ended up creating a new systemd unit with the switches mentioned in the documentaion. I was curious if that was required or if running the command first does the normal systemd unit take those options. Also if that a no and I need to keep my custom systemd unit to I need to keep the
switch or does it only require the key to be sent the first time
11/28/2022, 3:38 PM
The usual way to do this is to leave the unit file as is, and adjust options in the flags file.