Hudda
07/22/2019, 8:34 AMzwass
--verbose --tls_dump
and looking at the logs. This will let you see what configuration was received from Fleet and when queries are actually running.Hudda
07/24/2019, 11:59 AMzwass
time
table. Sounds like you have osqueryd running as a service or some other way? You'll need to stop that before running manually with the additional flags.