Hi, any idea?
# fim
g
Hi, any idea?
z
I'm guessing you are in
osqueryi
? You need
--disable_events=false
.
d
I think along with disable_events, you also need to enable event publishers via flags
☝️ 1