I’m pretty sure there’s something weird in the extensions/config. I recall something about how extensions get loaded, because they can create new config sections. (This might only be c++ ones, not thrift ones)
01/25/2021, 9:02 AM
We have used the generate config action in the past from an extension I think
01/25/2021, 2:53 PM
Is generate config the thing that returns a config to osquery, or does it register new config options?