Hudda07/22/2019, 8:34 AM
zwass07/22/2019, 5:15 PM
and looking at the logs. This will let you see what configuration was received from Fleet and when queries are actually running.
Hudda07/24/2019, 11:59 AM
zwass07/24/2019, 5:06 PM
table. Sounds like you have osqueryd running as a service or some other way? You'll need to stop that before running manually with the additional flags.