Gregory Storme
03/09/2022, 9:43 AMdisable_carver: true
in the global agent options, but I don't see this being changed on the orbit/osquery daemon
They are still running with the --disable_carver=false
flag
How is such a change to the global agent options reflected on the hosts?Michal Nicpon
03/09/2022, 10:39 PMdisable_carver
is not set.--disable_carver
is a cli flag, and is not set via agent options. You need to set it in the osquery flagfile or pass at directly when starting osquery