Artem
12/15/2020, 2:17 PMosquery_scheduled
returned denylisted=1 for query, but without any hardware utilization metrics. In my opinion, it looks like mismatch. Is it a way to remove this special query from denylist without direct access to client laptop and not to wait 24 hours?zwass
12/15/2020, 4:10 PMdenylist: false
in the yaml when scheduling the query. See https://osquery.readthedocs.io/en/stable/deployment/configuration/#schedule.Artem
12/15/2020, 7:20 PMzwass
12/15/2020, 7:39 PMArtem
12/15/2020, 9:32 PM