Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

I see that I can modify `osquery.flags` in the orbit root, but is there documentation for what flags are set by default by Orbit?

Specifically, I'm looking to see if the eBPF flag is set

I use this query to check for flags set and their default value.

`SELECT * FROM osquery_flags`

However, I do not see a eBPF flag in my environment today.

Maybe you refer to `enable_bpf_events` flag?

I didn't spell it out, but that is the one